High
Security advisory
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-14378
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:28 UTC · Revision 1
Source evidence
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
osv:CVE-2019-14378
Complete source record
{
"id": "91aa15d295d664aaaf55a7ff81104924c2303946309a864c867ae3be41cae9ad",
"url": "https://osv.dev/vulnerability/CVE-2019-14378",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-14378",
"summary": "ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.",
"evidence": "osv:CVE-2019-14378",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2019-14378",
"aliases": [
"CVE-2019-14378"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/spring-projects/spring-framework",
"type": "GIT",
"events": [
{
"introduced": "299f8b15ad1f74ca769b396d915e8369623279f2"
},
{
"last_affected": "299f8b15ad1f74ca769b396d915e8369623279f2"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:libslirp_project:libslirp:4.0.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.0"
},
{
"last_affected": "4.0.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"4.0.0",
"v4.0.0.RELEASE"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-14378.json"
}
},
{
"ranges": [
{
"repo": "https://gitlab.freedesktop.org/slirp/libslirp",
"type": "GIT",
"events": [
{
"introduced": "bc814a7cf15aa01652fb23fc99bcc36708ac9b0c"
},
{
"last_affected": "bc814a7cf15aa01652fb23fc99bcc36708ac9b0c"
},
{
"fixed": "126c04acbabd7ad32c2b018fe10dfac2a3bc1210"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:libslirp_project:libslirp:4.0.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.0"
},
{
"last_affected": "4.0.0"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "126c04acbabd7ad32c2b018fe10dfac2a3bc1210"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"4.0.0",
"v4.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-14378.json",
"vanir_signatures": [
{
"id": "CVE-2019-14378-303b7146",
"digest": {
"threshold": 0.9,
"line_hashes": [
"317361430190225003347536229565579127684",
"32876557084403352590041593915771637096",
"329287438392875335896608726947175177095",
"86677765742023927759653894039043670774",
"313169288687725037738192364702706909465",
"156244072918945693710603918551038402869",
"276087485554849238538926261260840071705"
]
},
"source": "https://gitlab.freedesktop.org/slirp/libslirp@126c04acbabd7ad32c2b018fe10dfac2a3bc1210",
"target": {
"file": "src/ip_input.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-14378-4d99f843",
"digest": {
"length": 2835,
"function_hash": "228952944605302490550765160498435836668"
},
"source": "https://gitlab.freedesktop.org/slirp/libslirp@126c04acbabd7ad32c2b018fe10dfac2a3bc1210",
"target": {
"file": "src/ip_input.c",
"function": "ip_reass"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:47:24Z"
}
}
],
"modified": "2026-10-24T14:47:24.915727355Z",
"provider": "osv",
"references": [
"https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPLHB2AN663OXAWUQURF7J2X5LHD4VD3/",
"https://news.ycombinator.com/item?id=20799010",
"https://seclists.org/bugtraq/2019/Aug/41",
"https://seclists.org/bugtraq/2019/Sep/3",
"https://support.f5.com/csp/article/K25423748",
"https://support.f5.com/csp/article/K25423748?utm_source=f5support&%3Butm_medium=RSS",
"https://usn.ubuntu.com/4191-1/",
"https://usn.ubuntu.com/4191-2/",
"https://access.redhat.com/errata/RHSA-2019:3179",
"https://access.redhat.com/errata/RHSA-2019:3403",
"https://access.redhat.com/errata/RHSA-2019:3494",
"https://access.redhat.com/errata/RHSA-2019:3742",
"https://access.redhat.com/errata/RHSA-2019:3787",
"https://access.redhat.com/errata/RHSA-2019:3968",
"https://access.redhat.com/errata/RHSA-2019:4344",
"https://access.redhat.com/errata/RHSA-2020:0366",
"https://access.redhat.com/errata/RHSA-2020:0775",
"https://www.debian.org/security/2019/dsa-4506",
"https://www.debian.org/security/2019/dsa-4512",
"https://gitlab.freedesktop.org/slirp/libslirp/commit/126c04acbabd7ad32c2b018fe10dfac2a3bc1210",
"https://blog.bi0s.in/2019/08/24/Pwn/VM-Escape/2019-07-29-qemu-vm-escape-cve-2019-14378/"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2019-14378",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443822,
"published_at": "2019-07-29T11:15:11.577+00:00"
}