NetSight
IP …
high7.5

CVE-2020-1983

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

Impact

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

Affected products

VendorProductAffected versions
Libslirp ProjectLibslirp
through 4.2.0
FedoraprojectFedora
Versions 31, 32
DebianDebian Linux
Versions 8.0, 9.0
OpensuseLeap
Version 15.1
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.10, 20.04

Weakness classification

CWE-416

References