Описание
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
Отчет
This issue affects the versions of tcpdump as shipped with Red Hat Enterprise Linux 7. This issue did not affect the versions of tcpdump as shipped with Red Hat Enterprise Linux 5 and 6.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | tcpdump | Not affected | ||
| Red Hat Enterprise Linux 6 | tcpdump | Not affected | ||
| Red Hat Enterprise Linux 7 | tcpdump | Fixed | RHSA-2019:3976 | 26.11.2019 |
| Red Hat Enterprise Linux 8 | tcpdump | Fixed | RHSA-2020:1604 | 28.04.2020 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.3 Medium
CVSS3
Связанные уязвимости
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_p ...
EPSS
4.3 Medium
CVSS3