tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Tcpdump | — | Upgrade macOS to the latest versionApply OS X security update 2017-001 Sierra | Nov 1, 2017 | Jul 22, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2017 |
| Debian | — | Upgrade tcpdump | Sep 13, 2017 | Jul 22, 2017 |
| Freebsd | — | Upgrade tcpdump | Sep 26, 2017 | Sep 26, 2017 |
| Gentoo Linux | — | Upgrade net-analyzer/tcpdump. | Oct 30, 2017 | Jul 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tcpdump | Dec 4, 2019 | Jul 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade tcpdump | Dec 18, 2019 | Jul 23, 2017 |
| Ibm Aix | — | Apply the fix or workaround for tcpdump_advisory3 | Nov 30, 2017 | Jul 22, 2017 |
| Oracle Solaris | — | Upgrade diagnostic/tcpdump to version 4.9.2-0.175.3.26.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Jul 22, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 18, 2017 |
| Suse | — | Upgrade tcpdump | Oct 10, 2017 | Jul 22, 2017 |
| Ubuntu | — | Upgrade tcpdump | Sep 14, 2017 | Jul 22, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub