According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - tcpdump before 4.9.3 mishandles the printing of SMB     data (issue 1 of 2).(CVE-2018-10103)

  - tcpdump before 4.9.3 mishandles the printing of SMB     data (issue 2 of 2).(CVE-2018-10105)

  - The ICMPv6 parser in tcpdump before 4.9.3 has a buffer     over-read in print-icmp6.c.(CVE-2018-14882)

  - lmp_print_data_link_subobjs() in print-lmp.c in tcpdump     before 4.9.3 lacks certain bounds     checks.(CVE-2019-15166)

  - The FRF.16 parser in tcpdump before 4.9.3 has a buffer     over-read in print-fr.c:mfr_print().(CVE-2018-14468)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2020_4760 advisory.

    * tcpdump: SMB data printing mishandled (CVE-2018-10103)

    * tcpdump: SMB data printing mishandled (CVE-2018-10105)

    * tcpdump: Out of bounds read/write in get_next_file() in tcpdump.c (CVE-2018-14879)

    * tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c (CVE-2018-14461)

    * tcpdump: Buffer over-read in icmp_print() function in print-icmp.c (CVE-2018-14462)

    * tcpdump: Buffer over-read in vrrp_print() function in print-vrrp.c (CVE-2018-14463)

    * tcpdump: Buffer over-read in lmp_print_data_link_subobjs() function in print-lmp.c (CVE-2018-14464)

    * tcpdump: Buffer over-read in rsvp_obj_print() function in print-rsvp.c (CVE-2018-14465)

    * tcpdump: Buffer over-read in print-icmp6.c (CVE-2018-14466)

    * tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c (CVE-2018-14467)

    * tcpdump: Buffer over-read in mfr_print() function in print-fr.c (CVE-2018-14468)

    * tcpdump: Buffer over-read in ikev1_n_print() function in print-isakmp.c (CVE-2018-14469)

    * tcpdump: Buffer over-read in babel_print_v2() in print-babel.c (CVE-2018-14470)

    * tcpdump: Buffer over-read in ospf6_print_lshdr() function in print-ospf6.c (CVE-2018-14880)

    * tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c (CVE-2018-14881)

    * tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c (CVE-2018-14882)

    * tcpdump: Buffer over-read in print-802_11.c (CVE-2018-16227)

    * tcpdump: Access to uninitialized buffer in print_prefix() function in print-hncp.c (CVE-2018-16228)

    * tcpdump: Buffer over-read in dccp_print_option() function in print-dccp.c (CVE-2018-16229)

    * tcpdump: Buffer over-read in bgp_attr_print() function in print-bgp.c (CVE-2018-16230)

    * tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c (CVE-2018-16300)

    * tcpdump: Buffer over-read in print_trans() function in print-smb.c (CVE-2018-16451)

    * tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c (CVE-2018-16452)

    * tcpdump: Buffer overflow in lmp_print_data_link_subobjs() in print-lmp.c (CVE-2019-15166)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

New version 4.9.3, Security fix for CVE-2017-16808, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14466, CVE-2018-14461, CVE-2018-14462, CVE-2018-14465, CVE-2018-14881, CVE-2018-14464, CVE-2018-14463, CVE-2018-14467, CVE-2018-10103, CVE-2018-10105, CVE-2018-14880, CVE-2018-16451, CVE-2018-14882, CVE-2018-16227, CVE-2018-16229, CVE-2018-16301, CVE-2018-16230, CVE-2018-16452, CVE-2018-16300, CVE-2018-16228, CVE-2019-15166, CVE-2019-15167, CVE-2017-16808, CVE-2018-14882, CVE-2018-19519

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for tcpdump fixes the following issues :

  - CVE-2017-16808: Fixed a heap-based buffer over-read     related to aoe_print and lookup_emem (bsc#1068716     bsc#1153098).

  - CVE-2018-10103: Fixed a mishandling of the printing of     SMB data (bsc#1153098).

  - CVE-2018-10105: Fixed a mishandling of the printing of     SMB data (bsc#1153098).

  - CVE-2018-14461: Fixed a buffer over-read in     print-ldp.c:ldp_tlv_print (bsc#1153098).

  - CVE-2018-14462: Fixed a buffer over-read in     print-icmp.c:icmp_print (bsc#1153098).

  - CVE-2018-14463: Fixed a buffer over-read in     print-vrrp.c:vrrp_print (bsc#1153098).

  - CVE-2018-14464: Fixed a buffer over-read in     print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).

  - CVE-2018-14465: Fixed a buffer over-read in     print-rsvp.c:rsvp_obj_print (bsc#1153098).

  - CVE-2018-14466: Fixed a buffer over-read in     print-rx.c:rx_cache_find (bsc#1153098).

  - CVE-2018-14467: Fixed a buffer over-read in     print-bgp.c:bgp_capabilities_print (bsc#1153098).

  - CVE-2018-14468: Fixed a buffer over-read in     print-fr.c:mfr_print (bsc#1153098).

  - CVE-2018-14469: Fixed a buffer over-read in     print-isakmp.c:ikev1_n_print (bsc#1153098).

  - CVE-2018-14470: Fixed a buffer over-read in     print-babel.c:babel_print_v2 (bsc#1153098).

  - CVE-2018-14879: Fixed a buffer overflow in the     command-line argument parser (bsc#1153098).

  - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3     parser (bsc#1153098).

  - CVE-2018-14881: Fixed a buffer over-read in the BGP     parser (bsc#1153098).

  - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6     parser (bsc#1153098).

  - CVE-2018-16227: Fixed a buffer over-read in the IEEE     802.11 parser in print-802_11.c for the Mesh Flags     subfield (bsc#1153098).

  - CVE-2018-16228: Fixed a buffer over-read in the HNCP     parser (bsc#1153098).

  - CVE-2018-16229: Fixed a buffer over-read in the DCCP     parser (bsc#1153098).

  - CVE-2018-16230: Fixed a buffer over-read in the BGP     parser in print-bgp.c:bgp_attr_print (bsc#1153098).

  - CVE-2018-16300: Fixed an unlimited recursion in the BGP     parser that allowed denial-of-service by stack     consumption (bsc#1153098).

  - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332     bsc#1153098).

  - CVE-2018-16451: Fixed several buffer over-reads in     print-smb.c:print_trans() for \MAILSLOT\BROWSE and     \PIPE\LANMAN (bsc#1153098).

  - CVE-2018-16452: Fixed a stack exhaustion in     smbutil.c:smb_fdata (bsc#1153098).

  - CVE-2019-15166: Fixed a bounds check in     lmp_print_data_link_subobjs (bsc#1153098).

  - CVE-2019-15167: Fixed a vulnerability in VRRP     (bsc#1153098).

This update was imported from the SUSE:SLE-15:Update update project.

ID	Name	Product	Family	Published	Updated	Severity
137465	EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2020-1623)	Nessus	Huawei Local Security Checks	6/17/2020	3/7/2024	critical
359310	Rocky Linux 8 [CIQ] Security Update: tcpdump / tcpdump-debuginfo / tcpdump-debugsource Multiple Vulnerabilities (crlsa-2020_4760)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical
130321	Fedora 30 : 14:tcpdump (2019-d06bc63433)	Nessus	Fedora Local Security Checks	10/28/2019	4/16/2024	critical
130086	openSUSE Security Update : tcpdump (openSUSE-2019-2348)	Nessus	SuSE Local Security Checks	10/21/2019	4/17/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical