Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:4149-1

Опубликовано: 17 дек. 2018
Источник: suse-cvrf

Описание

Security update for tcpdump

This update for tcpdump fixes the following issues:

Security issues fixed:

  • CVE-2018-19519: Fixed a stack-based buffer over-read in the print_prefix function (bsc#1117267)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
tcpdump-4.9.2-14.8.1
SUSE Linux Enterprise Desktop 12 SP4
tcpdump-4.9.2-14.8.1
SUSE Linux Enterprise Server 12 SP3
tcpdump-4.9.2-14.8.1
SUSE Linux Enterprise Server 12 SP4
tcpdump-4.9.2-14.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
tcpdump-4.9.2-14.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
tcpdump-4.9.2-14.8.1

Описание

In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.


Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.8.1
SUSE Linux Enterprise Desktop 12 SP4:tcpdump-4.9.2-14.8.1
SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.8.1
SUSE Linux Enterprise Server 12 SP4:tcpdump-4.9.2-14.8.1

Ссылки