PT-2018-3432 · Tcpdump+7 · Tcpdump+7
Publicado
2018-06-18
·
Atualizado
2025-12-03
·
CVE-2018-14879
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
tcpdump versions prior to 4.9.3
Description:
The issue is related to a buffer overflow in the
get next file() function in tcpdump.c, which can be exploited by a remote attacker to gain unauthorized access to information, cause a denial of service, or impact the availability of information. The vulnerability is also described as a heap-based buffer over-read related to aoe print in print-aoe.c and lookup emem in addrtoname.c.Recommendations:
For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
get next file() function until a patch is available. Additionally, be cautious when using command-line arguments to avoid potential exploitation.Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Ibm Aix
Red Hat
Rocky Linux
Suse
Ubuntu
Tcpdump