CVE-2019-15167

Опубликовано: 27 авг. 2022

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.

Ссылки

https://github.com/the-tcpdump-group/tcpdump/commit/a152aebfd1114376ba266ed30416be596ef9d806
Patch
Third Party Advisory
https://github.com/the-tcpdump-group/tcpdump/commit/a152aebfd1114376ba266ed30416be596ef9d806
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*

Версия до 4.9.3 (исключая)

EPSS

Процентиль: 30%

0.00113

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2019-15167

CVSS3: 9.1

ubuntu

больше 3 лет назад

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.

CVE-2019-15167

CVSS3: 7.5

redhat

больше 6 лет назад

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.

CVE-2019-15167

CVSS3: 9.1

debian

больше 3 лет назад

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in prin ...

GHSA-x3gm-3hr2-8g66

CVSS3: 9.1

github

больше 3 лет назад

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.

openSUSE-SU-2019:2348-1

suse-cvrf

больше 6 лет назад

Security update for tcpdump

EPSS

Процентиль: 30%

0.00113

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125