7

CVE-2018-14879

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Traffix Signaling Delivery Controller Version >= 5.0.0 <= 5.1.0
Tcpdump ≫ Tcpdump Version < 4.9.3
Apple ≫ macOS X Version < 10.15.2
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Fedoraproject ≫ Fedora Version29
Fedoraproject ≫ Fedora Version30
Fedoraproject ≫ Fedora Version31
Opensuse ≫ Leap Version15.0
Opensuse ≫ Leap Version15.1
Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Enterprise Linux Version8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.67% 0.906
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

http://seclists.org/fulldisclosure/2019/Dec/26
Third Party Advisory
Mailing List
https://seclists.org/bugtraq/2019/Dec/23
Third Party Advisory
Mailing List
https://support.apple.com/kb/HT210788
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html
Third Party Advisory
https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES
Third Party Advisory
Release Notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/
https://usn.ubuntu.com/4252-1/
https://usn.ubuntu.com/4252-2/
https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html
Third Party Advisory
https://seclists.org/bugtraq/2019/Oct/28
Third Party Advisory
Mailing List
https://security.netapp.com/advisory/ntap-20200120-0001/
https://www.debian.org/security/2019/dsa-4547
Third Party Advisory
https://github.com/the-tcpdump-group/tcpdump/commit/9ba91381954ad325ea4fd26b9c65a8bd9a2a85b6
Patch
Third Party Advisory
https://support.f5.com/csp/article/K51512510?utm_source=f5support&amp%3Butm_medium=RSS