tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Tcpdump | apple-osx-security-update-2017-001-sierraapple-osx-upgrade-latest | Nov 1, 2017 | Jul 22, 2017 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jul 23, 2017 | |
| Debian | debian-upgrade-tcpdump | Sep 13, 2017 | Jul 22, 2017 | |
| Freebsd | freebsd-upgrade-package-tcpdump | Sep 26, 2017 | Sep 26, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-net-analyzer-tcpdump | Oct 30, 2017 | Jul 22, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-tcpdump | Dec 4, 2019 | Jul 23, 2017 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-tcpdump | Dec 18, 2019 | Jul 23, 2017 | |
| Ibm Aix | ibm-aix-tcpdump_advisory3 | Nov 30, 2017 | Jul 22, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-diagnostic-tcpdump-4-9-2-0-175-3-26-0-3-0 | Nov 30, 2017 | Jul 22, 2017 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jul 18, 2017 | |
| Suse | — | suse-upgrade-tcpdump | Oct 10, 2017 | Jul 22, 2017 |
| Ubuntu | ubuntu-upgrade-tcpdump | Sep 14, 2017 | Jul 22, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub