The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-tcpdump | Sep 21, 2017 | Sep 14, 2017 |
| Apple Osx Tcpdump | apple-osx-security-update-2017-001-sierraapple-osx-upgrade-latest | Nov 1, 2017 | Sep 14, 2017 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Sep 14, 2017 | |
| Debian | debian-upgrade-tcpdump | Sep 13, 2017 | Sep 13, 2017 | |
| Freebsd | freebsd-upgrade-package-tcpdump | Sep 26, 2017 | Sep 26, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-net-analyzer-tcpdump | Oct 30, 2017 | Sep 14, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-tcpdump | Nov 30, 2017 | Sep 14, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-tcpdump | Nov 30, 2017 | Sep 14, 2017 | |
| Ibm Aix | ibm-aix-tcpdump_advisory3 | Nov 30, 2017 | Sep 14, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-diagnostic-tcpdump-4-9-2-0-175-3-26-0-3-0 | Nov 30, 2017 | Sep 14, 2017 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Sep 13, 2017 |
| Suse | — | suse-upgrade-tcpdump | Oct 26, 2017 | Sep 13, 2017 |
| Ubuntu | ubuntu-upgrade-tcpdump | Sep 14, 2017 | Sep 13, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub