PT-2017-12084 · Tcpdump+3 · Tcpdump+3
Publicado
2017-07-22
·
Atualizado
2024-06-15
·
CVE-2017-11541
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
tcpdump version 4.9.0
Description
The issue is related to a heap-based buffer over-read in the
lldp print function, which could allow a remote attacker to obtain sensitive information by sending a specially crafted request. This is caused by a buffer overread memory in the HNCP component.Recommendations
For tcpdump version 4.9.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the
lldp print function in the print-lldp.c file until a patch is available. Restrict access to the HNCP component to minimize the risk of exploitation.Exploit
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Aix
Suse
Ubuntu
Tcpdump