NetSight
IP …
high8.8Public exploit code

CVE-2019-14378

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.

Affected products

VendorProductAffected versions
Libslirp ProjectLibslirp
Version 4.0.0

Weakness classification

CWE-755CWE-787

References