The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade tcpdump | Sep 21, 2017 | Sep 14, 2017 |
| Apple Osx Tcpdump | — | Apply OS X security update 2017-001 SierraUpgrade macOS to the latest version | Nov 1, 2017 | Sep 14, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 14, 2017 |
| Debian | — | Upgrade tcpdump | Sep 13, 2017 | Sep 13, 2017 |
| Freebsd | — | Upgrade tcpdump | Sep 26, 2017 | Sep 26, 2017 |
| Gentoo Linux | — | Upgrade net-analyzer/tcpdump. | Oct 30, 2017 | Sep 14, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tcpdump | Nov 30, 2017 | Sep 14, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tcpdump | Nov 30, 2017 | Sep 14, 2017 |
| Ibm Aix | — | Apply the fix or workaround for tcpdump_advisory3 | Nov 30, 2017 | Sep 14, 2017 |
| Oracle Solaris | — | Upgrade diagnostic/tcpdump to version 4.9.2-0.175.3.26.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Sep 14, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2017 |
| Suse | — | Upgrade tcpdump | Oct 26, 2017 | Sep 13, 2017 |
| Ubuntu | — | Upgrade tcpdump | Sep 14, 2017 | Sep 13, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub