PT-2017-9702 · Tcpdump+6 · Tcpdump+6
Publicado
2017-01-27
·
Atualizado
2024-06-15
·
CVE-2016-8575
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
tcpdump versions prior to 4.9.0
Description
The issue is caused by a buffer overflow due to improper bounds checking in the ISO CLNS parser. This can be exploited by sending an overly long argument, potentially allowing a remote attacker to execute arbitrary code on the system or cause the application to crash. The buffer overflow is located in the
clnp print() function in print-isoclns.c.Recommendations
For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the
clnp print() function in print-isoclns.c until a patch is available.Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Ibm Aix
Red Hat
Suse
Ubuntu
Tcpdump