Name: CVE-2020-8037: Allocation of Resources Without Limits or Throttling
Creator: Rapid7
Published: 2020-11-04T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-8037, CWE-770, CVSS 7.5, EPSS 0.00219

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade tcpdump	May 4, 2022	Nov 4, 2020
Alpine Linux	—	Upgrade tcpdump	Jan 4, 2021	Nov 4, 2020
Apple Osx Tcpdump	—	Apply Apple macOS Security Update 2021-002 CatalinaApply Apple macOS Security Update 2021-003 MojaveUpgrade macOS to the latest version	Aug 23, 2021	Apr 26, 2021
Centos_linux	—	Upgrade tcpdump-debugsourceUpgrade tcpdumpUpgrade tcpdump-debuginfo	Nov 10, 2021	Nov 4, 2020
Debian	—	Upgrade tcpdump	Nov 12, 2020	Nov 4, 2020
F5 Big Ip	—	Update F5 BIG-IP to the latest version	Jun 17, 2026	Feb 24, 2025
Huawei Euleros 2_0_sp2	—	Upgrade tcpdump	Feb 22, 2021	Nov 4, 2020
Huawei Euleros 2_0_sp3	—	Upgrade tcpdump	Jan 20, 2021	Nov 4, 2020
Huawei Euleros 2_0_sp5	—	Upgrade tcpdump	Mar 24, 2021	Nov 4, 2020
Huawei Euleros 2_0_sp8	—	Upgrade tcpdump	Dec 15, 2020	Nov 4, 2020
Huawei Euleros 2_0_sp9	—	Upgrade tcpdump	Dec 1, 2020	Nov 4, 2020
Oracle Solaris	—	Upgrade diagnostic/tcpdump to version 4.9.3-11.4.30.0.1.88.0 on Solaris 11.4	Feb 17, 2021	Nov 4, 2020
Oracle_linux	—	Upgrade tcpdump	Nov 17, 2021	Apr 20, 2020
Redhat_linux	—	No solution existsUpgrade tcpdump-debuginfoUpgrade tcpdumpUpgrade tcpdump-debugsource	Nov 10, 2021	Nov 4, 2020
Rocky_linux	—	Upgrade tcpdump-debugsourceUpgrade tcpdumpUpgrade tcpdump-debuginfo	Mar 12, 2024	Nov 4, 2020
Suse	—	Upgrade tcpdump	Dec 13, 2020	Nov 4, 2020
Ubuntu	—	Upgrade tcpdumpUpgrade tcpdump (Ubuntu Pro)	Mar 17, 2022	Nov 4, 2020
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Nov 4, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business