The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tcpdump | May 4, 2022 | Oct 3, 2019 |
| Alpine Linux | — | Upgrade tcpdump | Aug 22, 2024 | Oct 3, 2019 |
| Apple Osx Tcpdump | — | Apply OS X security update 2019-007 High SierraUpgrade macOS to the latest versionApply OS X security update 2019-002 Mojave | Dec 11, 2019 | Oct 3, 2019 |
| Centos_linux | — | Upgrade tcpdump-debugsourceUpgrade tcpdumpUpgrade tcpdump-debuginfo | Nov 5, 2020 | Oct 3, 2019 |
| Debian | — | Upgrade tcpdump | Oct 15, 2019 | Oct 3, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade tcpdump | Apr 16, 2020 | Oct 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade tcpdump | Nov 28, 2019 | Oct 3, 2019 |
| Ibm Aix | — | Apply the fix or workaround for tcpdump_advisory5 | Jan 9, 2020 | Oct 3, 2019 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark to version 2.6.15-11.4.20.0.1.2.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp to version 5.8-11.4.20.0.1.2.0 on Solaris 11.4Upgrade diagnostic/iftop to version 0.17-11.4.20.0.1.1.0 on Solaris 11.4Upgrade diagnostic/wireshark/tshark to version 2.6.15-11.4.20.0.1.2.0 on Solaris 11.4Upgrade network/firewall/firewall-pflog to version 5.5-11.4.20.0.1.1.0 on Solaris 11.4Upgrade system/library/libdaq to version 2.0.6-11.4.20.0.1.1.0 on Solaris 11.4Upgrade diagnostic/wireshark/wireshark-common to version 2.6.15-11.4.20.0.1.2.0 on Solaris 11.4Upgrade diagnostic/nmap to version 7.80-11.4.20.0.1.1.0 on Solaris 11.4Upgrade diagnostic/nmap/zenmap to version 7.80-11.4.20.0.1.1.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp/demo to version 5.8-11.4.20.0.1.2.0 on Solaris 11.4Upgrade system/library/libpcap to version 1.9.1-11.4.20.0.1.1.0 on Solaris 11.4Upgrade library/python/net-snmp-27 to version 5.8-11.4.20.0.1.2.0 on Solaris 11.4Upgrade diagnostic/tcpdump to version 4.9.3-11.4.20.0.1.1.0 on Solaris 11.4Upgrade system/management/snmp/net-snmp/addons to version 5.8-11.4.20.0.1.2.0 on Solaris 11.4Upgrade diagnostic/snort to version 2.9.9.0-11.4.20.0.1.1.0 on Solaris 11.4 | Jan 19, 2021 | Oct 3, 2019 |
| Oracle_linux | — | Upgrade tcpdump | Nov 12, 2020 | Oct 2, 2019 |
| Redhat_linux | — | Upgrade tcpdumpUpgrade tcpdump-debuginfoUpgrade tcpdump-debugsourceNo solution exists | Nov 5, 2020 | Oct 3, 2019 |
| Rocky_linux | — | Upgrade tcpdump-debuginfoUpgrade tcpdump-debugsourceUpgrade tcpdump | Mar 12, 2024 | Oct 3, 2019 |
| Suse | — | Upgrade tcpdump | Oct 22, 2019 | Oct 3, 2019 |
| Ubuntu | — | Upgrade tcpdumpUpgrade tcpdump (Ubuntu Pro) | Jan 28, 2020 | Oct 3, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub