cve/2019/CVE-2019-14378.md

CVE-2019-14378

Description

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.

POC

Reference

• http://packetstormsecurity.com/files/154269/QEMU-Denial-Of-Service.html
• https://usn.ubuntu.com/4191-1/

Github

• https://github.com/alphaSeclab/sec-daily-2019
• https://github.com/qianfei11/QEMU-CVES