PT-2017-9429 · Tcpdump+5 · Tcpdump+5

Published 2017-01-27 · Updated 2024-06-15 · CVE-2016-7938

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.0

Description The issue concerns an integer overflow in the ZeroMQ parser, specifically in the zmtp1 print frame() function within print-zeromq.c. This problem affects tcpdump.

Recommendations For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the issue.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2019-1321

CESA-2017_1871

CVE-2016-7938

DLA-809-1

DSA-3775-1

MGASA-2017-0061

OPENSUSE-SU-2024:11425-1

RHSA-2017:1871

RHSA-2017_1871

SUSE-SU-2017:1110-1

USN-3205-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Tcpdump

References · 434

• 🔥 https://github.com/arntsonl/CVE-2015-2153 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2017:1110-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13022 · Security Note
• https://ubuntu.com/security/CVE-2017-5203 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12998 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5484 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13015 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12896 · Security Note
• https://ubuntu.com/security/CVE-2016-7975 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7973 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5341 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7927 · Security Note
• https://errata.altlinux.org/ALT-PU-2019-1321 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2016-7938 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13029 · Security Note