Debian/qemu: high 7.5

libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

Action: Upgrade qemu to 1:4.1-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2019-15890#Debian:14/qemu
• https://security-tracker.debian.org/tracker/CVE-2019-15890

published 2019-09-06T17:15:11.697Z · modified 2026-09-21T07:02:13.140503127Z · JSON