tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-tcpdump | Aug 22, 2024 | Nov 13, 2017 | |
| Apple Osx Tcpdump | apple-osx-security-update-2019-002-mojaveapple-osx-security-update-2019-007-high-sierraapple-osx-upgrade-latest | Dec 11, 2019 | Nov 13, 2017 | |
| Debian | debian-upgrade-tcpdump | Jul 30, 2024 | Nov 13, 2017 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-tcpdump | Nov 19, 2019 | Nov 13, 2017 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-tcpdump | Nov 19, 2019 | Nov 13, 2017 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-tcpdump | Nov 28, 2019 | Nov 13, 2017 | |
| Ibm Aix | ibm-aix-tcpdump_advisory5 | Jan 9, 2020 | Nov 13, 2017 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-diagnostic-tcpdump-4-9-2-11-4-13-0-1-2-0 | Sep 17, 2019 | Nov 13, 2017 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Nov 13, 2017 | |
| Suse | — | suse-upgrade-tcpdump | Aug 8, 2019 | Nov 13, 2017 |
| Ubuntu | ubuntu-pro-upgrade-tcpdumpubuntu-upgrade-tcpdump | Jan 28, 2020 | Nov 13, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub