PT-2017-9429 · Tcpdump+5 · Tcpdump+5

Publicado 2017-01-27 · Atualizado 2024-06-15 · CVE-2016-7938

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.0

Description The issue concerns an integer overflow in the ZeroMQ parser, specifically in the zmtp1 print frame() function within print-zeromq.c. This problem affects tcpdump.

Recommendations For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the issue.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2019-1321

CESA-2017_1871

CVE-2016-7938

DLA-809-1

DSA-3775-1

MGASA-2017-0061

OPENSUSE-SU-2024:11425-1

RHSA-2017:1871

RHSA-2017_1871

SUSE-SU-2017:1110-1

USN-3205-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Tcpdump

Referências · 434

• 🔥 https://github.com/arntsonl/CVE-2015-2153 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2017:1110-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13022 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-5203 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-13012 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12998 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2016-7930 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5484 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13015 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12896 · Nota de Segurança
• https://ubuntu.com/security/CVE-2016-7975 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-5202 · Nota
• https://suse.com/security/cve/CVE-2015-3138 · Nota
• https://suse.com/security/cve/CVE-2018-14879 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7973 · Nota de Segurança