Описание
Security update for tcpdump
This update for tcpdump fixes the following issues:
- CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).
The previous update of tcpdump already fixed variuous Buffer overflow/overread vulnerabilities [bsc#1153098, bsc#1153332]
- CVE-2017-16808 (AoE)
- CVE-2018-14468 (FrameRelay)
- CVE-2018-14469 (IKEv1)
- CVE-2018-14470 (BABEL)
- CVE-2018-14466 (AFS/RX)
- CVE-2018-14461 (LDP)
- CVE-2018-14462 (ICMP)
- CVE-2018-14465 (RSVP)
- CVE-2018-14464 (LMP)
- CVE-2019-15166 (LMP)
- CVE-2018-14880 (OSPF6)
- CVE-2018-14882 (RPL)
- CVE-2018-16227 (802.11)
- CVE-2018-16229 (DCCP)
- CVE-2018-14467 (BGP)
- CVE-2018-14881 (BGP)
- CVE-2018-16230 (BGP)
- CVE-2018-16300 (BGP)
- CVE-2018-14463 (VRRP)
- CVE-2019-15167 (VRRP)
- CVE-2018-14879 (tcpdump -V)
- CVE-2018-16228 (HNCP) is a duplicate of the already fixed CVE-2019-1010220
- CVE-2018-16301 (fixed in libpcap)
- CVE-2018-16451 (SMB)
- CVE-2018-16452 (SMB)
- CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
- CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)
Список пакетов
Image SLES12-SP4-Azure-BYOS
Image SLES12-SP4-EC2-HVM-BYOS
Image SLES12-SP4-GCE-BYOS
Image SLES12-SP4-OCI-BYOS
Image SLES12-SP4-SAP-Azure
Image SLES12-SP4-SAP-Azure-BYOS
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
Image SLES12-SP4-SAP-EC2-HVM
Image SLES12-SP4-SAP-EC2-HVM-BYOS
Image SLES12-SP4-SAP-GCE
Image SLES12-SP4-SAP-GCE-BYOS
Image SLES12-SP4-SAP-OCI-BYOS
Image SLES12-SP5-Azure-BYOS
Image SLES12-SP5-Azure-Basic-On-Demand
Image SLES12-SP5-Azure-HPC-BYOS
Image SLES12-SP5-Azure-HPC-On-Demand
Image SLES12-SP5-Azure-SAP-BYOS
Image SLES12-SP5-Azure-SAP-On-Demand
Image SLES12-SP5-Azure-Standard-On-Demand
Image SLES12-SP5-EC2-BYOS
Image SLES12-SP5-EC2-ECS-On-Demand
Image SLES12-SP5-EC2-On-Demand
Image SLES12-SP5-EC2-SAP-BYOS
Image SLES12-SP5-EC2-SAP-On-Demand
Image SLES12-SP5-GCE-BYOS
Image SLES12-SP5-GCE-On-Demand
Image SLES12-SP5-GCE-SAP-BYOS
Image SLES12-SP5-GCE-SAP-On-Demand
Image SLES12-SP5-OCI-BYOS-BYOS
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP5
Ссылки
- Link for SUSE-SU-2020:3360-1
- E-Mail link for SUSE-SU-2020:3360-1
- SUSE Security Ratings
- SUSE Bug 1153098
- SUSE Bug 1153332
- SUSE Bug 1178466
- SUSE CVE CVE-2017-16808 page
- SUSE CVE CVE-2018-10103 page
- SUSE CVE CVE-2018-10105 page
- SUSE CVE CVE-2018-14461 page
- SUSE CVE CVE-2018-14462 page
- SUSE CVE CVE-2018-14463 page
- SUSE CVE CVE-2018-14464 page
- SUSE CVE CVE-2018-14465 page
- SUSE CVE CVE-2018-14466 page
- SUSE CVE CVE-2018-14467 page
- SUSE CVE CVE-2018-14468 page
- SUSE CVE CVE-2018-14469 page
- SUSE CVE CVE-2018-14470 page
- SUSE CVE CVE-2018-14879 page
Описание
tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.
Затронутые продукты
Ссылки
- CVE-2017-16808
- SUSE Bug 1068716
- SUSE Bug 1153098
Описание
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).
Затронутые продукты
Ссылки
- CVE-2018-10103
- SUSE Bug 1153098
Описание
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).
Затронутые продукты
Ссылки
- CVE-2018-10105
- SUSE Bug 1153098
Описание
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
Затронутые продукты
Ссылки
- CVE-2018-14461
- SUSE Bug 1153098
Описание
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
Затронутые продукты
Ссылки
- CVE-2018-14462
- SUSE Bug 1153098
Описание
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
Затронутые продукты
Ссылки
- CVE-2018-14463
- SUSE Bug 1153098
Описание
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
Затронутые продукты
Ссылки
- CVE-2018-14464
- SUSE Bug 1153098
Описание
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
Затронутые продукты
Ссылки
- CVE-2018-14465
- SUSE Bug 1153098
Описание
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
Затронутые продукты
Ссылки
- CVE-2018-14466
- SUSE Bug 1153098
- SUSE Bug 1166972
Описание
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
Затронутые продукты
Ссылки
- CVE-2018-14467
- SUSE Bug 1153098
Описание
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
Затронутые продукты
Ссылки
- CVE-2018-14468
- SUSE Bug 1153098
Описание
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
Затронутые продукты
Ссылки
- CVE-2018-14469
- SUSE Bug 1153098
Описание
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
Затронутые продукты
Ссылки
- CVE-2018-14470
- SUSE Bug 1153098
Описание
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
Затронутые продукты
Ссылки
- CVE-2018-14879
- SUSE Bug 1153098
Описание
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
Затронутые продукты
Ссылки
- CVE-2018-14880
- SUSE Bug 1153098
Описание
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
Затронутые продукты
Ссылки
- CVE-2018-14881
- SUSE Bug 1153098
Описание
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
Затронутые продукты
Ссылки
- CVE-2018-14882
- SUSE Bug 1153098
Описание
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
Затронутые продукты
Ссылки
- CVE-2018-16227
- SUSE Bug 1153098
Описание
The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
Затронутые продукты
Ссылки
- CVE-2018-16228
- SUSE Bug 1153098
Описание
The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
Затронутые продукты
Ссылки
- CVE-2018-16229
- SUSE Bug 1153098
Описание
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).
Затронутые продукты
Ссылки
- CVE-2018-16230
- SUSE Bug 1153098
Описание
The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.
Затронутые продукты
Ссылки
- CVE-2018-16300
- SUSE Bug 1153098
Описание
The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.
Затронутые продукты
Ссылки
- CVE-2018-16301
- SUSE Bug 1153098
- SUSE Bug 1153332
- SUSE Bug 1195825
Описание
The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.
Затронутые продукты
Ссылки
- CVE-2018-16451
- SUSE Bug 1153098
Описание
The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.
Затронутые продукты
Ссылки
- CVE-2018-16452
- SUSE Bug 1153098
Описание
tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.
Затронутые продукты
Ссылки
- CVE-2019-1010220
- SUSE Bug 1142439
- SUSE Bug 1153098
Описание
lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
Затронутые продукты
Ссылки
- CVE-2019-15166
- SUSE Bug 1153098
Описание
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.
Затронутые продукты
Ссылки
- CVE-2019-15167
- SUSE Bug 1153098
Описание
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
Затронутые продукты
Ссылки
- CVE-2020-8037
- SUSE Bug 1178466