PT-2017-4160 · Tcpdump+4 · Tcpdump+4

Kirit1193 · Published 2017-11-13 · Updated 2024-06-15 · CVE-2017-16808

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3

Description The issue is related to a heap-based buffer over-read, which may allow a remote attacker to cause a denial of service.

Recommendations For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2019-3120

ALT-PU-2020-3563

ALT-PU-2021-1433

BDU:2021-05237

CVE-2017-16808

MGASA-2019-0297

OPENSUSE-SU-2019:1964-1

OPENSUSE-SU-2019:2344-1

OPENSUSE-SU-2019:2348-1

OPENSUSE-SU-2019_1964-1

OPENSUSE-SU-2019_2344-1

OPENSUSE-SU-2019_2348-1

OPENSUSE-SU-2024:11425-1

SUSE-SU-2019:2087-1

SUSE-SU-2019:2088-1

SUSE-SU-2019:2674-1

SUSE-SU-2019_2087-1

SUSE-SU-2019_2088-1

SUSE-SU-2019_2674-1

SUSE-SU-2020:3360-1

SUSE-SU-2020_3360-1

USN-4252-1

USN-4252-2

Affected Products

Alt Linux

Ibm Aix

Suse

Ubuntu

Tcpdump

References · 246

• https://osv.dev/vulnerability/openSUSE-SU-2019:1964-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14463 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2087-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16229 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-16808 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2017-16808 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15167 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10105 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2348-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00065.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-16808 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2088-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16 · Vendor Advisory