2024-07-22
ALT-BU-2024-10206-1
Branch p10 update bulletin.
Closed vulnerabilities
Published: 2019-10-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2018-16301
The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.
Severity: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
Published: 2020-11-04
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2020-8037
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- 20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina
- 20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina
- https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231
- https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231
- [debian-lts-announce] 20201110 [SECURITY] [DLA 2444-1] tcpdump security update
- [debian-lts-announce] 20201110 [SECURITY] [DLA 2444-1] tcpdump security update
- FEDORA-2020-c5e78886d6
- FEDORA-2020-c5e78886d6
- FEDORA-2020-fae2e1f2bc
- FEDORA-2020-fae2e1f2bc
- https://support.apple.com/kb/HT212325
- https://support.apple.com/kb/HT212325
- https://support.apple.com/kb/HT212326
- https://support.apple.com/kb/HT212326
- https://support.apple.com/kb/HT212327
- https://support.apple.com/kb/HT212327