PT-2017-9702 · Tcpdump+6 · Tcpdump+6
Published
2017-01-27
·
Updated
2024-06-15
·
CVE-2016-8575
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
tcpdump versions prior to 4.9.0
Description
The issue is caused by a buffer overflow due to improper bounds checking in the ISO CLNS parser. This can be exploited by sending an overly long argument, potentially allowing a remote attacker to execute arbitrary code on the system or cause the application to crash. The buffer overflow is located in the
clnp print() function in print-isoclns.c.Recommendations
For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the
clnp print() function in print-isoclns.c until a patch is available.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Ibm Aix
Red Hat
Suse
Ubuntu
Tcpdump