Comment 3 for bug 1837094

Revision history for this message
Philippe Mathieu-Daudé (philmd) wrote :

I apologize for not understanding this bug was a security issue, and not insisting on it.

It has been fixed in SLiRP by "Fix use-afte-free in ip_reass() (CVE-2020-1983)":
https://gitlab.freedesktop.org/slirp/libslirp/commit/9bd6c591

And in QEMU by commit 7769c23774 "slirp: update to fix CVE-2020-1983".