CVE 2020-1983

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

Related bugs and status

CVE-2020-1983 (Candidate) is related to these bugs:

Bug #1837094: UndefinedBehaviorSanitizer crash around slirp::ip_reass()

Summary				In	Importance	Status
	1837094	UndefinedBehaviorSanitizer crash around slirp::ip_reass()		QEMU	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.