PT-2017-3915 · Tcpdump+7 · Tcpdump+7

Published 2017-10-08 · Updated 2025-12-17 · CVE-2018-14465

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3

Description The issue is related to a buffer over-read in the rsvp obj print() function in print-rsvp.c of the tcpdump utility. This can allow a remote attacker to cause a denial of service or potentially gain unauthorized access to information, affecting its integrity and availability.

Recommendations For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the rsvp obj print() function in print-rsvp.c until a patch is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2019-3120

ALT-PU-2020-3563

ALT-PU-2021-1433

BDU:2019-04768

BDU:2020-04970

CESA-2020_4760

CVE-2018-14465

DLA-1955-1

DSA-4547-1

MGASA-2019-0297

OPENSUSE-SU-2019:2344-1

OPENSUSE-SU-2019:2348-1

OPENSUSE-SU-2019_2344-1

OPENSUSE-SU-2019_2348-1

OPENSUSE-SU-2024:11425-1

RHSA-2020:4760

RHSA-2020_4760

RLSA-2020:4760

SUSE-SU-2019:14191-1

SUSE-SU-2019:2674-1

SUSE-SU-2019_14191-1

SUSE-SU-2020:3360-1

USN-4252-1

USN-4252-2

Affected Products

Alt Linux

Centos

Ibm Aix

Red Hat

Rocky Linux

Suse

Ubuntu

Tcpdump

References · 280

• https://github.com/the-tcpdump-group/tcpdump/commit/bea2686c296b79609060a104cc139810785b0739 · Patch
• https://usn.ubuntu.com/4252-1 · Vendor Advisory
• https://usn.ubuntu.com/4252-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14465 · Security Note
• https://osv.dev/vulnerability/RLSA-2020:4760 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-14465 · Vendor Advisory
• https://debian.org/security/2019/dsa-4547 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16227 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-14465 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14463 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-14465 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16229 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15167 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4547-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10105 · Vendor Advisory