Описание
tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 4.9.3-0ubuntu0.18.04.1 |
| devel | not-affected | 4.9.3-4 |
| disco | ignored | end of life |
| eoan | not-affected | 4.9.3-2 |
| esm-infra-legacy/trusty | released | 4.9.3-0ubuntu0.14.04.1+esm1 |
| esm-infra/bionic | released | 4.9.3-0ubuntu0.18.04.1 |
| esm-infra/xenial | released | 4.9.3-0ubuntu0.16.04.1 |
| precise/esm | not-affected | 4.9.3-0ubuntu0.12.04.1 |
| trusty | ignored | end of standard support |
| trusty/esm | released | 4.9.3-0ubuntu0.14.04.1+esm1 |
Показывать по
Ссылки на источники
4.3 Medium
CVSS2
3.3 Low
CVSS3
Связанные уязвимости
tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.
tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.
tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. T ...
tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.
Уязвимость утилиты для перехвата и анализа сетевого трафика tcpdump, вызванная переполнением буфера, позволяющая нарушителю раскрыть защищаемую информацию
4.3 Medium
CVSS2
3.3 Low
CVSS3