PT-2017-4160 · Tcpdump+4 · Tcpdump+4

Kirit1193 · Publicado 2017-11-13 · Atualizado 2024-06-15 · CVE-2017-16808

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3

Description The issue is related to a heap-based buffer over-read, which may allow a remote attacker to cause a denial of service.

Recommendations For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2019-3120

ALT-PU-2020-3563

ALT-PU-2021-1433

BDU:2021-05237

CVE-2017-16808

MGASA-2019-0297

OPENSUSE-SU-2019:1964-1

OPENSUSE-SU-2019:2344-1

OPENSUSE-SU-2019:2348-1

OPENSUSE-SU-2019_1964-1

OPENSUSE-SU-2019_2344-1

OPENSUSE-SU-2019_2348-1

OPENSUSE-SU-2024:11425-1

SUSE-SU-2019:2087-1

SUSE-SU-2019:2088-1

SUSE-SU-2019:2674-1

SUSE-SU-2019_2087-1

SUSE-SU-2019_2088-1

SUSE-SU-2019_2674-1

SUSE-SU-2020:3360-1

SUSE-SU-2020_3360-1

USN-4252-1

USN-4252-2

Produtos afetados

Alt Linux

Ibm Aix

Suse

Ubuntu

Tcpdump

Referências · 246

• https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES · Nota
• https://github.com/the-tcpdump-group/tcpdump/issues/645 · Nota
• https://suse.com/security/cve/CVE-2017-13007 · Nota
• https://suse.com/security/cve/CVE-2017-13025 · Nota
• https://suse.com/security/cve/CVE-2018-16301 · Nota
• https://suse.com/security/cve/CVE-2016-7923 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2019:1964-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-7984 · Nota
• https://suse.com/security/cve/CVE-2017-13052 · Nota
• https://suse.com/security/cve/CVE-2017-13022 · Nota
• https://suse.com/security/cve/CVE-2018-14882 · Nota
• https://suse.com/security/cve/CVE-2017-13725 · Nota
• https://suse.com/security/cve/CVE-2016-7986 · Nota
• https://suse.com/security/cve/CVE-2017-13036 · Nota
• https://bugzilla.suse.com/1153098 · Nota