Lucene search
DotsecurityH1:831353HistoryMar 25, 2020 - 3:43 p.m.
Internet Bug Bounty: tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c
2020-03-2515:43:57
dotsecurity
hackerone.com
$500
16
0.002 Low
EPSS
Percentile
54.8%
There seems to be a heap-based buffer overread while running tcpdump on a crafted pcap file. A similar behavior is seen when tcpdump is listening on an interface and the contents of this file is relayed over the network.
Please find the detailed report on github
https://github.com/the-tcpdump-group/tcpdump/issues/645
CVE: https://nvd.nist.gov/vuln/detail/CVE-2017-16808
Impact
Heap Over Read
Related
cve
cve
CVE-2017-16808
2017-11-13 21:29:00
cvelist
cvelist
CVE-2017-16808
2017-11-13 21:00:00
veracode
veracode
Denial Of Service (DoS)
2020-08-06 21:35:38
osv
osv
CVE-2017-16808
2017-11-13 21:29:00
nvd
nvd
CVE-2017-16808
2017-11-13 21:29:00
prion
prion
Heap overflow
2017-11-13 21:29:00
debiancve
debiancve
CVE-2017-16808
2017-11-13 21:29:00
alpinelinux
alpinelinux
CVE-2017-16808
2017-11-13 21:29:00
redhatcve
redhatcve
CVE-2017-16808
2017-11-23 20:19:32
ubuntucve
ubuntucve
CVE-2017-16808
2017-11-13 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:2087-1)
2021-06-09 00:00:00
Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2019-2257)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:2088-1)
2021-04-19 00:00:00
nessus
nessus
SUSE SLED12 / SLES12 Security Update : tcpdump (SUSE-SU-2019:2088-1)
2019-08-12 00:00:00
SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2019:2087-1)
2019-08-12 00:00:00
EulerOS 2.0 SP3 : tcpdump (EulerOS-SA-2019-2257)
2019-11-08 00:00:00
suse
suse
Security update for tcpdump (moderate)
2019-08-20 00:00:00
Security update for tcpdump (important)
2019-10-20 00:00:00
Security update for tcpdump (important)
2019-10-20 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0007
2019-03-20 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0007
2019-03-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1985
2021-07-02 18:15:22
ibm
ibm
Security Bulletin: Vulnerabilities in tcpdump affect AIX
2021-02-26 18:48:40
slackware
slackware
[slackware-security] tcpdump
2019-10-02 06:51:41
aix
aix
cloudfoundry
cloudfoundry
USN-4252-1: tcpdump vulnerabilities | Cloud Foundry
2020-02-12 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: tcpdump-4.9.3-1.fc31
2019-10-30 00:58:06
[SECURITY] Fedora 30 Update: tcpdump-4.9.3-1.fc30
2019-10-28 01:03:58
[SECURITY] Fedora 29 Update: tcpdump-4.9.3-1.fc29
2019-10-25 18:09:47
ubuntu
ubuntu
tcpdump vulnerabilities
2020-01-27 00:00:00
tcpdump vulnerabilities
2020-01-27 00:00:00
mageia
mageia
Updated libpcap and tcpdump packages fix security vulnerabilities
2019-10-17 01:22:41
