CVE-2018-19519medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
References
http://www.securityfocus.com/bid/106098
https://access.redhat.com/errata/RHSA-2019:3976
https://github.com/zyingp/temp/blob/master/tcpdump.md
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
Details
Source: MITRE
Published: 2018-11-25
Updated: 2020-08-24
Type: CWE-909
Risk Information
CVSS v2
Base Score: 4.3
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Impact Score: 2.9
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3
Base Score: 5.5
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 144026 | Virtuozzo 7 : tcpdump (VZLSA-2019-3976) | Nessus | Virtuozzo Local Security Checks | medium |
| 143041 | RHEL 8 : tcpdump (RHSA-2020:1604) | Nessus | Red Hat Local Security Checks | medium |
| 133291 | Ubuntu 16.04 LTS / 18.04 LTS : tcpdump vulnerabilities (USN-4252-1) | Nessus | Ubuntu Local Security Checks | critical |
| 133095 | Amazon Linux 2 : tcpdump (ALAS-2020-1385) | Nessus | Amazon Linux Local Security Checks | medium |
| 133077 | NewStart CGSL CORE 5.05 / MAIN 5.05 : tcpdump Vulnerability (NS-SA-2020-0008) | Nessus | NewStart CGSL Local Security Checks | medium |
| 132826 | EulerOS Virtualization for ARM 64 3.0.5.0 : tcpdump (EulerOS-SA-2020-1072) | Nessus | Huawei Local Security Checks | critical |
| 132500 | NewStart CGSL CORE 5.04 / MAIN 5.04 : tcpdump Vulnerability (NS-SA-2019-0266) | Nessus | NewStart CGSL Local Security Checks | medium |
| 131680 | Scientific Linux Security Update : tcpdump on SL7.x x86_64 (20191202) | Nessus | Scientific Linux Local Security Checks | medium |
| 131570 | CentOS 7 : tcpdump (CESA-2019:3976) | Nessus | CentOS Local Security Checks | medium |
| 131518 | Oracle Linux 7 : tcpdump (ELSA-2019-3976) | Nessus | Oracle Linux Local Security Checks | medium |
| 131377 | RHEL 7 : tcpdump (RHSA-2019:3976) | Nessus | Red Hat Local Security Checks | medium |
| 131371 | EulerOS 2.0 SP8 : tcpdump (EulerOS-SA-2019-2305) | Nessus | Huawei Local Security Checks | critical |
| 130719 | EulerOS 2.0 SP3 : tcpdump (EulerOS-SA-2019-2257) | Nessus | Huawei Local Security Checks | medium |
| 130695 | EulerOS 2.0 SP5 : tcpdump (EulerOS-SA-2019-2233) | Nessus | Huawei Local Security Checks | medium |
| 130370 | Fedora 31 : 14:tcpdump (2019-6db0d5b9d9) | Nessus | Fedora Local Security Checks | critical |
| 130321 | Fedora 30 : 14:tcpdump (2019-d06bc63433) | Nessus | Fedora Local Security Checks | critical |
| 130308 | Fedora 29 : 14:tcpdump (2019-85d92df70f) | Nessus | Fedora Local Security Checks | critical |
| 125162 | Photon OS 1.0: Tcpdump PHSA-2019-1.0-0218 | Nessus | PhotonOS Local Security Checks | high |
| 123155 | openSUSE Security Update : tcpdump (openSUSE-2019-1016) | Nessus | SuSE Local Security Checks | medium |
| 122429 | AIX 7.2 TL 3 : tcpdump (IJ12983) | Nessus | AIX Local Security Checks | medium |
| 122428 | AIX 7.2 TL 2 : tcpdump (IJ12982) | Nessus | AIX Local Security Checks | medium |
| 122427 | AIX 7.2 TL 1 : tcpdump (IJ12981) | Nessus | AIX Local Security Checks | medium |
| 122426 | AIX 7.1 TL 5 : tcpdump (IJ12980) | Nessus | AIX Local Security Checks | medium |
| 122425 | AIX 7.1 TL 4 : tcpdump (IJ12979) | Nessus | AIX Local Security Checks | medium |
| 120187 | SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2018:4131-1) | Nessus | SuSE Local Security Checks | medium |
| 119857 | openSUSE Security Update : tcpdump (openSUSE-2018-1589) | Nessus | SuSE Local Security Checks | medium |
| 119742 | SUSE SLED12 / SLES12 Security Update : tcpdump (SUSE-SU-2018:4149-1) | Nessus | SuSE Local Security Checks | medium |
| 119715 | openSUSE Security Update : tcpdump (openSUSE-2018-1559) | Nessus | SuSE Local Security Checks | medium |