Published: 03/10/2019 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The LDP parser in tcpdump prior to 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().

Vulnerable Product	Search on Vulmon	Subscribe to Product
tcpdump tcpdump
redhat enterprise linux 7.0
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0
opensuse leap 15.0
fedoraproject fedora 29
fedoraproject fedora 30
redhat enterprise linux 8.0
opensuse leap 15.1
fedoraproject fedora 31
apple mac os x

Debian Bug report logs - #941698 tcpdump: CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882 CVE-2018-16227 CVE-2018-16228 CVE-2018-16229 CVE-2018-16230 CVE-201 ...

Synopsis Moderate: tcpdump security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for tcpdump is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Sy ...

Synopsis Moderate: Red Hat OpenShift Container Storage 460 security, bug fix, enhancement update Type/Severity Security Advisory: Moderate Topic Updated images are now available for Red Hat OpenShift Container Storage 460 on Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as ha ...

Several security issues were fixed in tcpdump ...

Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer These vulnerabilities might result in denial of service or, potentially, execution of arbitrary code For the oldstable distribution (stretch), these problems have been fixed in version 493-1~deb9u1 For the stable distribution (buster), these proble ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2019-12-10-3 macOS Catalina 10152, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra <! ...

CWE-125 https://github.com/the-tcpdump-group/tcpdump/commit/aa5c6b710dfd8020d2c908d6b3bd41f1da719b3b https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html https://seclists.org/bugtraq/2019/Oct/28 https://www.debian.org/security/2019/dsa-4547 https://support.apple.com/kb/HT210788 https://seclists.org/bugtraq/2019/Dec/23 http://seclists.org/fulldisclosure/2019/Dec/26 https://security.netapp.com/advisory/ntap-20200120-0001/https://usn.ubuntu.com/4252-2/https://usn.ubuntu.com/4252-1/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=941698 https://nvd.nist.gov https://usn.ubuntu.com/4252-2/

CVE-2018-14461

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect