REDHAT-BUG-1655374: Low severity tcpdump vulnerability
Published Dec 3, 2018
·Updated
In tcpdump 4.9.2, a stack-based buffer over-read exists in the printprefix function of print-hncp.c via crafted packet data because of missing initialization.
Reference:
https://github.com/zyingp/temp/blob/master/tcpdump.md
Affected Software
1 affected component
tcpdump tcpdump
Event History
Dec 3, 2018
Data Sourced
via Red Hat·03:55 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1655374?
The severity of REDHAT-BUG-1655374 is rated as a moderate security vulnerability.
2
How do I fix REDHAT-BUG-1655374?
To fix REDHAT-BUG-1655374, update tcpdump to the latest version that has addressed this vulnerability.
3
What impact does REDHAT-BUG-1655374 have on systems?
REDHAT-BUG-1655374 can lead to potential data leakage due to a stack-based buffer over-read.
4
Which versions of tcpdump are affected by REDHAT-BUG-1655374?
REDHAT-BUG-1655374 affects tcpdump version 4.9.2 and possibly earlier versions.
5
Is there a workaround for REDHAT-BUG-1655374 until a fix is available?
There is no official workaround for REDHAT-BUG-1655374; users are advised to apply the patch as soon as possible.