The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-tcpdump | May 4, 2022 | Oct 3, 2019 | |
| Alpine Linux | alpine-linux-upgrade-tcpdump | Aug 22, 2024 | Oct 3, 2019 | |
| Apple Osx Tcpdump | apple-osx-security-update-2019-002-mojaveapple-osx-security-update-2019-007-high-sierraapple-osx-upgrade-latest | Dec 11, 2019 | Oct 3, 2019 | |
| Centos_linux | — | centos-upgrade-tcpdumpcentos-upgrade-tcpdump-debuginfocentos-upgrade-tcpdump-debugsource | Nov 5, 2020 | Oct 3, 2019 |
| Debian | debian-upgrade-tcpdump | Oct 15, 2019 | Oct 3, 2019 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Nov 11, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-tcpdump | Apr 16, 2020 | Oct 3, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-tcpdump | Dec 11, 2019 | Oct 3, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-tcpdump | Nov 28, 2019 | Oct 3, 2019 | |
| Ibm Aix | ibm-aix-tcpdump_advisory5 | Jan 9, 2020 | Oct 3, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-diagnostic-iftop-0-17-11-4-20-0-1-1-0oracle-solaris-11-4-upgrade-diagnostic-nmap-7-80-11-4-20-0-1-1-0oracle-solaris-11-4-upgrade-diagnostic-nmap-zenmap-7-80-11-4-20-0-1-1-0oracle-solaris-11-4-upgrade-diagnostic-snort-2-9-9-0-11-4-20-0-1-1-0oracle-solaris-11-4-upgrade-diagnostic-tcpdump-4-9-3-11-4-20-0-1-1-0oracle-solaris-11-4-upgrade-diagnostic-wireshark-2-6-15-11-4-20-0-1-2-0oracle-solaris-11-4-upgrade-diagnostic-wireshark-tshark-2-6-15-11-4-20-0-1-2-0oracle-solaris-11-4-upgrade-diagnostic-wireshark-wireshark-common-2-6-15-11-4-20-0-1-2-0oracle-solaris-11-4-upgrade-library-python-net-snmp-27-5-8-11-4-20-0-1-2-0oracle-solaris-11-4-upgrade-network-firewall-firewall-pflog-5-5-11-4-20-0-1-1-0oracle-solaris-11-4-upgrade-system-library-libdaq-2-0-6-11-4-20-0-1-1-0oracle-solaris-11-4-upgrade-system-library-libpcap-1-9-1-11-4-20-0-1-1-0oracle-solaris-11-4-upgrade-system-management-snmp-net-snmp-5-8-11-4-20-0-1-2-0oracle-solaris-11-4-upgrade-system-management-snmp-net-snmp-addons-5-8-11-4-20-0-1-2-0oracle-solaris-11-4-upgrade-system-management-snmp-net-snmp-demo-5-8-11-4-20-0-1-2-0 | Jan 19, 2021 | Oct 3, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-tcpdump | Nov 12, 2020 | Oct 2, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-tcpdumpredhat-upgrade-tcpdump-debuginforedhat-upgrade-tcpdump-debugsource | Nov 5, 2020 | Oct 3, 2019 | |
| Rocky_linux | rocky-upgrade-tcpdumprocky-upgrade-tcpdump-debuginforocky-upgrade-tcpdump-debugsource | Mar 12, 2024 | Oct 3, 2019 | |
| Suse | — | suse-upgrade-tcpdump | Oct 16, 2019 | Oct 3, 2019 |
| Ubuntu | ubuntu-pro-upgrade-tcpdumpubuntu-upgrade-tcpdump | Jan 28, 2020 | Oct 3, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub