tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade tcpdump | Aug 22, 2024 | Nov 13, 2017 |
| Apple Osx Tcpdump | — | Apply OS X security update 2019-007 High SierraApply OS X security update 2019-002 MojaveUpgrade macOS to the latest version | Dec 11, 2019 | Nov 13, 2017 |
| Debian | — | Upgrade tcpdump | Jul 30, 2024 | Nov 13, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade tcpdump | Nov 19, 2019 | Nov 13, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade tcpdump | Nov 19, 2019 | Nov 13, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade tcpdump | Nov 28, 2019 | Nov 13, 2017 |
| Ibm Aix | — | Apply the fix or workaround for tcpdump_advisory5 | Jan 9, 2020 | Nov 13, 2017 |
| Oracle Solaris | — | Upgrade diagnostic/tcpdump to version 4.9.2-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Nov 13, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 13, 2017 |
| Suse | — | Upgrade tcpdump | Aug 8, 2019 | Nov 13, 2017 |
| Ubuntu | — | Upgrade tcpdump (Ubuntu Pro)Upgrade tcpdump | Jan 28, 2020 | Nov 13, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub