The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tcpdump | May 4, 2022 | Oct 3, 2019 |
| Alpine Linux | — | Upgrade tcpdump | Aug 22, 2024 | Oct 3, 2019 |
| Apple Osx Tcpdump | — | Upgrade macOS to the latest versionApply OS X security update 2019-007 High SierraApply OS X security update 2019-002 Mojave | Dec 11, 2019 | Oct 3, 2019 |
| Centos_linux | — | Upgrade tcpdump-debuginfoUpgrade tcpdump-debugsourceUpgrade tcpdump | Nov 5, 2020 | Oct 3, 2019 |
| Debian | — | Upgrade tcpdump | Oct 15, 2019 | Oct 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade tcpdump | Apr 16, 2020 | Oct 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade tcpdump | Dec 11, 2019 | Oct 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade tcpdump | Nov 29, 2019 | Oct 3, 2019 |
| Ibm Aix | — | Apply the fix or workaround for tcpdump_advisory5 | Jan 9, 2020 | Oct 3, 2019 |
| Oracle Solaris | — | Upgrade system/management/snmp/net-snmp/addons to version 5.8-11.4.20.0.1.2.0 on Solaris 11.4Upgrade system/library/libdaq to version 2.0.6-11.4.20.0.1.1.0 on Solaris 11.4Upgrade network/firewall/firewall-pflog to version 5.5-11.4.20.0.1.1.0 on Solaris 11.4Upgrade diagnostic/wireshark/tshark to version 2.6.15-11.4.20.0.1.2.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp/demo to version 5.8-11.4.20.0.1.2.0 on Solaris 11.4Upgrade library/python/net-snmp-27 to version 5.8-11.4.20.0.1.2.0 on Solaris 11.4Upgrade diagnostic/wireshark to version 2.6.15-11.4.20.0.1.2.0 on Solaris 11.4Upgrade diagnostic/wireshark/wireshark-common to version 2.6.15-11.4.20.0.1.2.0 on Solaris 11.4Upgrade diagnostic/iftop to version 0.17-11.4.20.0.1.1.0 on Solaris 11.4Upgrade diagnostic/nmap to version 7.80-11.4.20.0.1.1.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp to version 5.8-11.4.20.0.1.2.0 on Solaris 11.4Upgrade diagnostic/tcpdump to version 4.9.3-11.4.20.0.1.1.0 on Solaris 11.4Upgrade diagnostic/snort to version 2.9.9.0-11.4.20.0.1.1.0 on Solaris 11.4Upgrade system/library/libpcap to version 1.9.1-11.4.20.0.1.1.0 on Solaris 11.4Upgrade diagnostic/nmap/zenmap to version 7.80-11.4.20.0.1.1.0 on Solaris 11.4 | Jan 19, 2021 | Oct 3, 2019 |
| Oracle_linux | — | Upgrade tcpdump | Nov 12, 2020 | Oct 2, 2019 |
| Redhat_linux | — | No solution existsUpgrade tcpdump-debuginfoUpgrade tcpdump-debugsourceUpgrade tcpdump | Nov 5, 2020 | Oct 3, 2019 |
| Rocky_linux | — | Upgrade tcpdumpUpgrade tcpdump-debugsourceUpgrade tcpdump-debuginfo | Mar 12, 2024 | Oct 3, 2019 |
| Suse | — | Upgrade tcpdump | Oct 22, 2019 | Oct 3, 2019 |
| Ubuntu | — | Upgrade tcpdump (Ubuntu Pro)Upgrade tcpdump | Jan 28, 2020 | Oct 3, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub