9.8

CVE-2017-5203

The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tcpdump ≫ Tcpdump Version < 4.9.0
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.78% 0.886
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://access.redhat.com/errata/RHSA-2017:1871
Third Party Advisory
http://www.debian.org/security/2017/dsa-3775
Third Party Advisory
http://www.securityfocus.com/bid/95852
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037755
Third Party Advisory
VDB Entry
https://security.gentoo.org/glsa/201702-30
Third Party Advisory
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html