Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-1010220

Опубликовано: 22 июл. 2019
Источник: nvd
CVSS3: 3.3
CVSS2: 4.3
EPSS Низкий

Описание

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:tcpdump:tcpdump:4.9.2:*:*:*:*:*:*:*

EPSS

Процентиль: 52%
0.00293
Низкий

3.3 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-126
CWE-125

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 6 лет назад

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.

CVSS3: 5.4
redhat
больше 6 лет назад

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.

CVSS3: 3.3
debian
больше 6 лет назад

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. T ...

CVSS3: 3.3
github
больше 3 лет назад

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.

CVSS3: 3.3
fstec
больше 6 лет назад

Уязвимость утилиты для перехвата и анализа сетевого трафика tcpdump, вызванная переполнением буфера, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 52%
0.00293
Низкий

3.3 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-126
CWE-125