Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2017-11108
Vulnerability from cvelistv5
Published
2017-07-08 17:00
Modified
2024-08-05 17:57
Severity ?
EPSS score ?
Summary
tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T17:57:57.636Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "GLSA-201709-23", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/201709-23" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT208221" }, { "name": "DSA-3971", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2017/dsa-3971" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504" }, { "name": "RHEA-2018:0705", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2017-07-08T00:00:00", "descriptions": [ { "lang": "en", "value": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-05-16T09:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "name": "GLSA-201709-23", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/201709-23" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT208221" }, { "name": "DSA-3971", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2017/dsa-3971" }, { "tags": [ "x_refsource_MISC" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504" }, { "name": "RHEA-2018:0705", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-11108", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "GLSA-201709-23", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201709-23" }, { "name": "https://support.apple.com/HT208221", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208221" }, { "name": "DSA-3971", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2017/dsa-3971" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504" }, { "name": "RHEA-2018:0705", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-11108", "datePublished": "2017-07-08T17:00:00", "dateReserved": "2017-07-08T00:00:00", "dateUpdated": "2024-08-05T17:57:57.636Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "fkie_nvd": { "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A6BE599F-A3FF-402C-A2C8-119B5E81CE8C\"}]}]}]", "descriptions": "[{\"lang\": \"en\", \"value\": \"tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.\"}, {\"lang\": \"es\", \"value\": \"tcpdump 4.9.0 permite que atacantes remotos provoquen una denegaci\\u00f3n de servicio (sobrelectura de b\\u00fafer basada en memoria din\\u00e1mica o heap y cierre inesperado de aplicaci\\u00f3n) mediante datos de paquetes manipulados. El cierre inesperado ocurre en la funci\\u00f3n EXTRACT_16BITS que es llamada desde la funci\\u00f3n stp_print por el protocolo Spanning Tree (STP).\"}]", "id": "CVE-2017-11108", "lastModified": "2024-11-21T03:07:06.830", "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}", "published": "2017-07-08T17:29:00.197", "references": "[{\"url\": \"http://www.debian.org/security/2017/dsa-3971\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://access.redhat.com/errata/RHEA-2018:0705\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1468504\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201709-23\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://support.apple.com/HT208221\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2017/dsa-3971\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHEA-2018:0705\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1468504\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201709-23\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.apple.com/HT208221\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]", "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-125\"}]}]" }, "nvd": "{\"cve\":{\"id\":\"CVE-2017-11108\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-07-08T17:29:00.197\",\"lastModified\":\"2024-11-21T03:07:06.830\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.\"},{\"lang\":\"es\",\"value\":\"tcpdump 4.9.0 permite que atacantes remotos provoquen una denegaci\u00f3n de servicio (sobrelectura de b\u00fafer basada en memoria din\u00e1mica o heap y cierre inesperado de aplicaci\u00f3n) mediante datos de paquetes manipulados. El cierre inesperado ocurre en la funci\u00f3n EXTRACT_16BITS que es llamada desde la funci\u00f3n stp_print por el protocolo Spanning Tree (STP).\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6BE599F-A3FF-402C-A2C8-119B5E81CE8C\"}]}]}],\"references\":[{\"url\":\"http://www.debian.org/security/2017/dsa-3971\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHEA-2018:0705\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1468504\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201709-23\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.apple.com/HT208221\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2017/dsa-3971\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHEA-2018:0705\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1468504\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201709-23\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/HT208221\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
ghsa-rr85-pcqj-p9q5
Vulnerability from github
Published
2022-05-13 01:42
Modified
2022-05-13 01:42
Severity ?
Details
tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
{ "affected": [], "aliases": [ "CVE-2017-11108" ], "database_specific": { "cwe_ids": [ "CWE-125" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2017-07-08T17:29:00Z", "severity": "HIGH" }, "details": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "id": "GHSA-rr85-pcqj-p9q5", "modified": "2022-05-13T01:42:08Z", "published": "2022-05-13T01:42:08Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11108" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHEA-2018:0705" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201709-23" }, { "type": "WEB", "url": "https://support.apple.com/HT208221" }, { "type": "WEB", "url": "http://www.debian.org/security/2017/dsa-3971" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }
icsa-19-155-01
Vulnerability from csaf_cisa
Published
2019-06-04 00:00
Modified
2019-06-04 00:00
Summary
PHOENIX CONTACT PLCNext AXC F 2152
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.
Critical infrastructure sectors
Commercial Facilities
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Recommended Practices
NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.
Recommended Practices
NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:
Exploitability
No known public exploits specifically target these vulnerabilities.
{ "document": { "acknowledgments": [ { "names": [ "Zahra Khani" ], "organization": "Firmalyzer", "summary": "reporting some of these vulnerabilities to NCCIC" }, { "organization": "OPC Foundation", "summary": "reporting some of these vulnerabilities to Phoenix Contact" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.", "title": "Risk evaluation" }, { "category": "other", "text": "Commercial Facilities", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:", "title": "Recommended Practices" }, { "category": "other", "text": "No known public exploits specifically target these vulnerabilities.", "title": "Exploitability" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-19-155-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-155-01.json" }, { "category": "self", "summary": "ICS Advisory ICSA-19-155-01 - Web Scraped Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" } ], "title": "PHOENIX CONTACT PLCNext AXC F 2152", "tracking": { "current_release_date": "2019-06-04T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-19-155-01", "initial_release_date": "2019-06-04T00:00:00.000000Z", "revision_history": [ { "date": "2019-06-04T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-19-155-01 PHOENIX CONTACT PLCNext AXC F 2152" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "2404267 version 1.x", "product": { "name": "AXC F 2152: article number 2404267 version 1.x", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "AXC F 2152" }, { "branches": [ { "category": "product_version_range", "name": "1046568 (Starterkit) version 1.x", "product": { "name": "AXC F 2152: article number 1046568 (Starterkit) version 1.x", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "AXC F 2152" } ], "category": "vendor", "name": "Phoenix Contact" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-7559", "cwe": { "id": "CWE-326", "name": "Inadequate Encryption Strength" }, "notes": [ { "category": "summary", "text": "A remote attacker can exploit a server \u0027s private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7559" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2019-10998", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "summary", "text": "An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10998" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2019-10997", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "notes": [ { "category": "summary", "text": "An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10997" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-8816", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "summary", "text": "The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8816" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9953", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9953" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-8817", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an \u0027[\u0027 character.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8817" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11541", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11541" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11542", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11542" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11543", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11543" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5334", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "summary", "text": "Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5334" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5336", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5336" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9841", "cwe": { "id": "CWE-823", "name": "Use of Out-of-range Pointer Offset" }, "notes": [ { "category": "summary", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9841" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000120", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "summary", "text": "A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000120" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5337", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5337" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9843", "cwe": { "id": "CWE-354", "name": "Improper Validation of Integrity Check Value" }, "notes": [ { "category": "summary", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9843" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000257", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl\u0027s deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000257" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000122", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000122" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000301", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000301" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000005", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn\u0027t updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000005" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9842", "cwe": { "id": "CWE-1335", "name": "Incorrect Bitwise Shift of Integer" }, "notes": [ { "category": "summary", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9842" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9840", "cwe": { "id": "CWE-823", "name": "Use of Out-of-range Pointer Offset" }, "notes": [ { "category": "summary", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9840" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9952", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "summary", "text": "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by \"*.com.\"", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9952" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-1247", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)" }, "notes": [ { "category": "summary", "text": "The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1247" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9023", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9023" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-6301", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "summary", "text": "The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6301" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7141", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "notes": [ { "category": "summary", "text": "curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7141" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7444", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "summary", "text": "The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7444" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000121", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000121" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000254", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000254" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11108", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11108" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11185", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11185" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3731", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3731" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9233", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9233" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5335", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5335" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9022", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "summary", "text": "The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9022" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000117", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000117" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-5388", "cwe": { "id": "CWE-124", "name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)" }, "notes": [ { "category": "summary", "text": "In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5388" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000101", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "curl supports \"globbing\" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000101" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000100", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "summary", "text": "When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn\u0027t restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl\u0027s redirect protocols with --proto-redir and libcurl\u0027s with CURLOPT_REDIR_PROTOCOLS.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000100" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7103", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "summary", "text": "Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7103" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2015-9251", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "summary", "text": "jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3738", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "summary", "text": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3738" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-0737", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "notes": [ { "category": "summary", "text": "The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0737" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3737", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "summary", "text": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3737" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-15906", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "summary", "text": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15906" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3735", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3735" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] } ] }
ICSA-19-155-01
Vulnerability from csaf_cisa
Published
2019-06-04 00:00
Modified
2019-06-04 00:00
Summary
PHOENIX CONTACT PLCNext AXC F 2152
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.
Critical infrastructure sectors
Commercial Facilities
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Recommended Practices
NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.
Recommended Practices
NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:
Exploitability
No known public exploits specifically target these vulnerabilities.
{ "document": { "acknowledgments": [ { "names": [ "Zahra Khani" ], "organization": "Firmalyzer", "summary": "reporting some of these vulnerabilities to NCCIC" }, { "organization": "OPC Foundation", "summary": "reporting some of these vulnerabilities to Phoenix Contact" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.", "title": "Risk evaluation" }, { "category": "other", "text": "Commercial Facilities", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "general", "text": "NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:", "title": "Recommended Practices" }, { "category": "other", "text": "No known public exploits specifically target these vulnerabilities.", "title": "Exploitability" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-19-155-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-155-01.json" }, { "category": "self", "summary": "ICS Advisory ICSA-19-155-01 - Web Scraped Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01" } ], "title": "PHOENIX CONTACT PLCNext AXC F 2152", "tracking": { "current_release_date": "2019-06-04T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-19-155-01", "initial_release_date": "2019-06-04T00:00:00.000000Z", "revision_history": [ { "date": "2019-06-04T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-19-155-01 PHOENIX CONTACT PLCNext AXC F 2152" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "2404267 version 1.x", "product": { "name": "AXC F 2152: article number 2404267 version 1.x", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "AXC F 2152" }, { "branches": [ { "category": "product_version_range", "name": "1046568 (Starterkit) version 1.x", "product": { "name": "AXC F 2152: article number 1046568 (Starterkit) version 1.x", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "AXC F 2152" } ], "category": "vendor", "name": "Phoenix Contact" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-7559", "cwe": { "id": "CWE-326", "name": "Inadequate Encryption Strength" }, "notes": [ { "category": "summary", "text": "A remote attacker can exploit a server \u0027s private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7559" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2019-10998", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "summary", "text": "An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10998" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2019-10997", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "notes": [ { "category": "summary", "text": "An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10997" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-8816", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "summary", "text": "The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8816" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9953", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9953" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-8817", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an \u0027[\u0027 character.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8817" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11541", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11541" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11542", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11542" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11543", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11543" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5334", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "summary", "text": "Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5334" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5336", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5336" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9841", "cwe": { "id": "CWE-823", "name": "Use of Out-of-range Pointer Offset" }, "notes": [ { "category": "summary", "text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9841" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000120", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "summary", "text": "A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000120" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5337", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5337" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9843", "cwe": { "id": "CWE-354", "name": "Improper Validation of Integrity Check Value" }, "notes": [ { "category": "summary", "text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9843" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000257", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl\u0027s deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000257" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000122", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000122" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000301", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000301" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000005", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn\u0027t updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000005" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9842", "cwe": { "id": "CWE-1335", "name": "Incorrect Bitwise Shift of Integer" }, "notes": [ { "category": "summary", "text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9842" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9840", "cwe": { "id": "CWE-823", "name": "Use of Out-of-range Pointer Offset" }, "notes": [ { "category": "summary", "text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9840" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-9952", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "summary", "text": "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by \"*.com.\"", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9952" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-1247", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)" }, "notes": [ { "category": "summary", "text": "The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1247" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9023", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9023" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-6301", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "summary", "text": "The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6301" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7141", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "notes": [ { "category": "summary", "text": "curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7141" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7444", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "summary", "text": "The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7444" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000121", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000121" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000254", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000254" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11108", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11108" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-11185", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11185" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3731", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3731" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9233", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "notes": [ { "category": "summary", "text": "XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9233" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-5335", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "summary", "text": "The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5335" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-9022", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "summary", "text": "The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9022" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-1000117", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000117" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-5388", "cwe": { "id": "CWE-124", "name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)" }, "notes": [ { "category": "summary", "text": "In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5388" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000101", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "curl supports \"globbing\" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000101" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-1000100", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "summary", "text": "When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn\u0027t restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl\u0027s redirect protocols with --proto-redir and libcurl\u0027s with CURLOPT_REDIR_PROTOCOLS.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000100" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2016-7103", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "summary", "text": "Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7103" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2015-9251", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "summary", "text": "jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3738", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "summary", "text": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3738" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2018-0737", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "notes": [ { "category": "summary", "text": "The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0737" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3737", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "summary", "text": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3737" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-15906", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "summary", "text": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15906" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] }, { "cve": "CVE-2017-3735", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "summary", "text": "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3735" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "vendor_fix", "details": "Follow the advice concerning SD card usage in the manual \u201cArt.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf\u201d that can be found on the product page below:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267\u0026library=usen\u0026pcck=P-21-14-01\u0026tab=1\u0026selectedCategory=ALL" }, { "category": "mitigation", "details": "Use the notification manager to monitor SD card exchanges by the application program.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note \u201cArt.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,\u201d which can be found at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf" }, { "category": "mitigation", "details": "For more information, CERT@VDE has released a security advisory available at the following link:", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://cert.vde.com/en-us/advisories/vde-2019-009" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] } ] }
RHEA-2018:0705
Vulnerability from csaf_redhat
Published
2018-04-10 00:00
Modified
2024-11-22 11:30
Summary
Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update
Notes
Topic
An update for tcpdump is now available for Red Hat Enterprise Linux 7.
Details
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.
Users of tcpdump are advised to upgrade to these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for tcpdump is now available for Red Hat Enterprise Linux 7.", "title": "Topic" }, { "category": "general", "text": "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.\n\nUsers of tcpdump are advised to upgrade to these updated packages.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHEA-2018:0705", "url": "https://access.redhat.com/errata/RHEA-2018:0705" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html", "url": "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html" }, { "category": "external", "summary": "1464390", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1464390" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_0705.json" } ], "title": "Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update", "tracking": { "current_release_date": "2024-11-22T11:30:03+00:00", "generator": { "date": "2024-11-22T11:30:03+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHEA-2018:0705", "initial_release_date": "2018-04-10T00:00:00+00:00", "revision_history": [ { "date": "2018-04-10T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-04-10T11:58:24+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T11:30:03+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.x86_64", "product": { "name": "tcpdump-14:4.9.2-3.el7.x86_64", "product_id": "tcpdump-14:4.9.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=x86_64\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=x86_64\u0026epoch=14" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.src", "product": { "name": "tcpdump-14:4.9.2-3.el7.src", "product_id": "tcpdump-14:4.9.2-3.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=src\u0026epoch=14" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.s390x", "product": { "name": "tcpdump-14:4.9.2-3.el7.s390x", "product_id": "tcpdump-14:4.9.2-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=s390x\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=s390x\u0026epoch=14" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.ppc64", "product": { "name": "tcpdump-14:4.9.2-3.el7.ppc64", "product_id": "tcpdump-14:4.9.2-3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64\u0026epoch=14" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.ppc64le", "product": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le", "product_id": "tcpdump-14:4.9.2-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64le\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64le\u0026epoch=14" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.aarch64", "product": { "name": "tcpdump-14:4.9.2-3.el7.aarch64", "product_id": "tcpdump-14:4.9.2-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=aarch64\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=aarch64\u0026epoch=14" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-11108", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2017-07-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472878" } ], "notes": [ { "category": "description", "text": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11108" }, { "category": "external", "summary": "RHBZ#1472878", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472878" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11108", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11108" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11108", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11108" } ], "release_date": "2017-07-07T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function" }, { "cve": "CVE-2017-11541", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475352" } ], "notes": [ { "category": "description", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: heap-based buffer over-read in the lldp_print", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11541" }, { "category": "external", "summary": "RHBZ#1475352", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475352" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11541", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11541" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: heap-based buffer over-read in the lldp_print" }, { "cve": "CVE-2017-11542", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475355" } ], "notes": [ { "category": "description", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: heap-based buffer over-read in the pimv1_print", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11542" }, { "category": "external", "summary": "RHBZ#1475355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475355" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11542", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11542" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11542", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11542" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: heap-based buffer over-read in the pimv1_print" }, { "cve": "CVE-2017-11543", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475358" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in tcpdump\u0027s handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: buffer overflow in the sliplink_print function", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11543" }, { "category": "external", "summary": "RHBZ#1475358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475358" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11543", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11543" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11543", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11543" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: buffer overflow in the sliplink_print function" }, { "cve": "CVE-2017-11544", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475359" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in tcpdump\u0027s handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Segmentation Violation in the compressed_sl_print", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11544" }, { "category": "external", "summary": "RHBZ#1475359", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475359" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11544", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11544" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11544", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11544" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Segmentation Violation in the compressed_sl_print" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12893", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490539" } ], "notes": [ { "category": "description", "text": "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12893" }, { "category": "external", "summary": "RHBZ#1490539", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490539" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12893", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12893" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12893", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12893" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12894", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490540" } ], "notes": [ { "category": "description", "text": "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12894" }, { "category": "external", "summary": "RHBZ#1490540", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490540" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12894", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12894" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12894", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12894" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12895", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490541" } ], "notes": [ { "category": "description", "text": "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12895" }, { "category": "external", "summary": "RHBZ#1490541", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490541" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12895", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12895" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12895", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12895" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12896", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490543" } ], "notes": [ { "category": "description", "text": "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12896" }, { "category": "external", "summary": "RHBZ#1490543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12896", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12896" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12896", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12896" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12897", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490545" } ], "notes": [ { "category": "description", "text": "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12897" }, { "category": "external", "summary": "RHBZ#1490545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12897", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12897" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12897", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12897" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12898", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490546" } ], "notes": [ { "category": "description", "text": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12898" }, { "category": "external", "summary": "RHBZ#1490546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12898", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12898" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12898", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12898" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12899", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490547" } ], "notes": [ { "category": "description", "text": "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12899" }, { "category": "external", "summary": "RHBZ#1490547", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490547" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12899", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12899" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12899", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12899" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12900", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490548" } ], "notes": [ { "category": "description", "text": "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in util-print.c:tok2strbuf()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12900" }, { "category": "external", "summary": "RHBZ#1490548", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490548" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12900", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12900" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12900", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12900" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in util-print.c:tok2strbuf()" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12901", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490549" } ], "notes": [ { "category": "description", "text": "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12901" }, { "category": "external", "summary": "RHBZ#1490549", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490549" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12901", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12901" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12901", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12901" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12902", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490550" } ], "notes": [ { "category": "description", "text": "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12902" }, { "category": "external", "summary": "RHBZ#1490550", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490550" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12902", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12902" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12902", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12902" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12985", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490551" } ], "notes": [ { "category": "description", "text": "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12985" }, { "category": "external", "summary": "RHBZ#1490551", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490551" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12985", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12985" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12985", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12985" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12986", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490552" } ], "notes": [ { "category": "description", "text": "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12986" }, { "category": "external", "summary": "RHBZ#1490552", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490552" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12986", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12986" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12986", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12986" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12987", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490553" } ], "notes": [ { "category": "description", "text": "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12987" }, { "category": "external", "summary": "RHBZ#1490553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490553" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12987", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12987" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12987", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12987" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12988", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490554" } ], "notes": [ { "category": "description", "text": "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12988" }, { "category": "external", "summary": "RHBZ#1490554", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490554" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12988", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12988" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12988", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12988" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12989", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490555" } ], "notes": [ { "category": "description", "text": "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12989" }, { "category": "external", "summary": "RHBZ#1490555", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490555" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12989", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12989" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12989", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12989" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12990", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490556" } ], "notes": [ { "category": "description", "text": "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12990" }, { "category": "external", "summary": "RHBZ#1490556", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490556" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12990", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12990" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12990", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12990" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12991", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490557" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12991" }, { "category": "external", "summary": "RHBZ#1490557", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490557" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12991", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12991" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12991", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12991" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12992", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490558" } ], "notes": [ { "category": "description", "text": "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12992" }, { "category": "external", "summary": "RHBZ#1490558", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490558" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12992", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12992" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12992", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12992" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12993", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490559" } ], "notes": [ { "category": "description", "text": "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12993" }, { "category": "external", "summary": "RHBZ#1490559", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490559" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12993", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12993" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12993", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12993" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12994", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490560" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12994" }, { "category": "external", "summary": "RHBZ#1490560", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490560" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12994", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12994" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12994", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12994" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12995", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490561" } ], "notes": [ { "category": "description", "text": "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12995" }, { "category": "external", "summary": "RHBZ#1490561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490561" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12995", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12995" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12995", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12995" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12996", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490562" } ], "notes": [ { "category": "description", "text": "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12996" }, { "category": "external", "summary": "RHBZ#1490562", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490562" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12996", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12996" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12996", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12996" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12997", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490564" } ], "notes": [ { "category": "description", "text": "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12997" }, { "category": "external", "summary": "RHBZ#1490564", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490564" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12997", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12997" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12997", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12997" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12998", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490565" } ], "notes": [ { "category": "description", "text": "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12998" }, { "category": "external", "summary": "RHBZ#1490565", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490565" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12998", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12998" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12998", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12998" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12999", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490566" } ], "notes": [ { "category": "description", "text": "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12999" }, { "category": "external", "summary": "RHBZ#1490566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490566" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12999", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12999" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12999", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12999" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13000", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490567" } ], "notes": [ { "category": "description", "text": "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13000" }, { "category": "external", "summary": "RHBZ#1490567", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490567" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13000", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13000" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13000", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13000" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13001", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490568" } ], "notes": [ { "category": "description", "text": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13001" }, { "category": "external", "summary": "RHBZ#1490568", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490568" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13001", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13001" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13001", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13001" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13002", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490569" } ], "notes": [ { "category": "description", "text": "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13002" }, { "category": "external", "summary": "RHBZ#1490569", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490569" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13002", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13002" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13002", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13002" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13003", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490570" } ], "notes": [ { "category": "description", "text": "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13003" }, { "category": "external", "summary": "RHBZ#1490570", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490570" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13003", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13003" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13003", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13003" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13004", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490571" } ], "notes": [ { "category": "description", "text": "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13004" }, { "category": "external", "summary": "RHBZ#1490571", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490571" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13004", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13004" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13004", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13004" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13005", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490572" } ], "notes": [ { "category": "description", "text": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13005" }, { "category": "external", "summary": "RHBZ#1490572", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490572" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13005", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13005" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13005", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13005" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13006", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490573" } ], "notes": [ { "category": "description", "text": "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13006" }, { "category": "external", "summary": "RHBZ#1490573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490573" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13006", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13006" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13006", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13006" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13007", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490574" } ], "notes": [ { "category": "description", "text": "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13007" }, { "category": "external", "summary": "RHBZ#1490574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490574" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13007", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13007" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13008", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490575" } ], "notes": [ { "category": "description", "text": "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13008" }, { "category": "external", "summary": "RHBZ#1490575", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490575" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13008", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13008" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13008", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13008" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13009", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490576" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13009" }, { "category": "external", "summary": "RHBZ#1490576", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490576" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13009", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13009" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13009", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13009" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13010", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490577" } ], "notes": [ { "category": "description", "text": "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13010" }, { "category": "external", "summary": "RHBZ#1490577", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490577" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13010", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13010" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13010", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13010" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13011", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490578" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in tcpdump\u0027s verbose printing of packet data. A crafted pcap file or specially crafted network traffic could cause tcpdump to write out of bounds in the BSS segment, potentially causing tcpdump to display truncated or incorrectly decoded fields or crash with a segmentation violation. This does not affect tcpdump when used with the -w option to save a pcap file.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13011" }, { "category": "external", "summary": "RHBZ#1490578", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490578" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13011", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13011" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13011", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13011" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13012", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490579" } ], "notes": [ { "category": "description", "text": "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13012" }, { "category": "external", "summary": "RHBZ#1490579", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490579" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13012", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13012" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13012", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13012" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13013", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490580" } ], "notes": [ { "category": "description", "text": "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13013" }, { "category": "external", "summary": "RHBZ#1490580", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490580" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13013", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13013" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13013", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13013" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13014", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490581" } ], "notes": [ { "category": "description", "text": "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13014" }, { "category": "external", "summary": "RHBZ#1490581", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490581" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13014", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13014" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13014", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13014" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13015", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490582" } ], "notes": [ { "category": "description", "text": "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13015" }, { "category": "external", "summary": "RHBZ#1490582", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490582" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13015", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13015" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13015", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13015" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13016", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490583" } ], "notes": [ { "category": "description", "text": "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13016" }, { "category": "external", "summary": "RHBZ#1490583", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490583" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13016", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13016" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13016", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13016" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13017", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490584" } ], "notes": [ { "category": "description", "text": "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13017" }, { "category": "external", "summary": "RHBZ#1490584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490584" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13017", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13017" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13017", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13017" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13018", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490585" } ], "notes": [ { "category": "description", "text": "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13018" }, { "category": "external", "summary": "RHBZ#1490585", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490585" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13018", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13018" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13018", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13018" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13019", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490586" } ], "notes": [ { "category": "description", "text": "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13019" }, { "category": "external", "summary": "RHBZ#1490586", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490586" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13019", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13019" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13019", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13019" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13020", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490587" } ], "notes": [ { "category": "description", "text": "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13020" }, { "category": "external", "summary": "RHBZ#1490587", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490587" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13020", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13020" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13021", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490588" } ], "notes": [ { "category": "description", "text": "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13021" }, { "category": "external", "summary": "RHBZ#1490588", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490588" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13021", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13021" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13021", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13021" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13022", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490589" } ], "notes": [ { "category": "description", "text": "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13022" }, { "category": "external", "summary": "RHBZ#1490589", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490589" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13022", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13022" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13022", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13022" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13023", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490590" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13023" }, { "category": "external", "summary": "RHBZ#1490590", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490590" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13023", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13023" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13023", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13023" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13024", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490591" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13024" }, { "category": "external", "summary": "RHBZ#1490591", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490591" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13024", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13024" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13024", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13024" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13025", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490592" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13025" }, { "category": "external", "summary": "RHBZ#1490592", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490592" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13025", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13025" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13025", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13025" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13026", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490593" } ], "notes": [ { "category": "description", "text": "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13026" }, { "category": "external", "summary": "RHBZ#1490593", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490593" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13026", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13026" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13026", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13026" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13027", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490594" } ], "notes": [ { "category": "description", "text": "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13027" }, { "category": "external", "summary": "RHBZ#1490594", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490594" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13027", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13027" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13027", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13027" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13028", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490595" } ], "notes": [ { "category": "description", "text": "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13028" }, { "category": "external", "summary": "RHBZ#1490595", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490595" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13028", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13028" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13028", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13028" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13029", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490596" } ], "notes": [ { "category": "description", "text": "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13029" }, { "category": "external", "summary": "RHBZ#1490596", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490596" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13029", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13029" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13029", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13029" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13030", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490597" } ], "notes": [ { "category": "description", "text": "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13030" }, { "category": "external", "summary": "RHBZ#1490597", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490597" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13030", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13030" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13030", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13030" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13031", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490598" } ], "notes": [ { "category": "description", "text": "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13031" }, { "category": "external", "summary": "RHBZ#1490598", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490598" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13031", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13031" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13031", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13031" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13032", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490599" } ], "notes": [ { "category": "description", "text": "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13032" }, { "category": "external", "summary": "RHBZ#1490599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490599" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13032", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13032" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13032", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13032" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13033", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490600" } ], "notes": [ { "category": "description", "text": "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13033" }, { "category": "external", "summary": "RHBZ#1490600", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490600" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13033", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13033" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13033", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13033" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13034", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490601" } ], "notes": [ { "category": "description", "text": "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13034" }, { "category": "external", "summary": "RHBZ#1490601", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490601" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13034", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13034" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13034", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13034" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13035", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490602" } ], "notes": [ { "category": "description", "text": "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13035" }, { "category": "external", "summary": "RHBZ#1490602", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490602" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13035", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13035" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13035", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13035" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13036", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490603" } ], "notes": [ { "category": "description", "text": "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13036" }, { "category": "external", "summary": "RHBZ#1490603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490603" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13036", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13036" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13036", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13036" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13037", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490604" } ], "notes": [ { "category": "description", "text": "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13037" }, { "category": "external", "summary": "RHBZ#1490604", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490604" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13037", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13037" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13037", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13037" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13038", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490605" } ], "notes": [ { "category": "description", "text": "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13038" }, { "category": "external", "summary": "RHBZ#1490605", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490605" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13038", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13038" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13038", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13038" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13039", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490606" } ], "notes": [ { "category": "description", "text": "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13039" }, { "category": "external", "summary": "RHBZ#1490606", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490606" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13039", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13039" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13039", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13039" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13040", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490607" } ], "notes": [ { "category": "description", "text": "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13040" }, { "category": "external", "summary": "RHBZ#1490607", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490607" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13040", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13040" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13040" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13041", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490608" } ], "notes": [ { "category": "description", "text": "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13041" }, { "category": "external", "summary": "RHBZ#1490608", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490608" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13041", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13041" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13041", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13041" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13042", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490609" } ], "notes": [ { "category": "description", "text": "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13042" }, { "category": "external", "summary": "RHBZ#1490609", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490609" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13042", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13042" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13042", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13042" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13043", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490610" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13043" }, { "category": "external", "summary": "RHBZ#1490610", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490610" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13043", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13043" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13043", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13043" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13044", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490611" } ], "notes": [ { "category": "description", "text": "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13044" }, { "category": "external", "summary": "RHBZ#1490611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490611" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13044", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13044" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13044", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13044" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13045", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490612" } ], "notes": [ { "category": "description", "text": "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13045" }, { "category": "external", "summary": "RHBZ#1490612", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490612" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13045", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13045" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13045", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13045" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13046", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490613" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13046" }, { "category": "external", "summary": "RHBZ#1490613", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490613" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13046", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13046" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13046", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13046" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13047", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490614" } ], "notes": [ { "category": "description", "text": "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13047" }, { "category": "external", "summary": "RHBZ#1490614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490614" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13047", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13047" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13047", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13047" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13048", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490615" } ], "notes": [ { "category": "description", "text": "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13048" }, { "category": "external", "summary": "RHBZ#1490615", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490615" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13048", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13048" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13048", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13048" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13049", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490616" } ], "notes": [ { "category": "description", "text": "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13049" }, { "category": "external", "summary": "RHBZ#1490616", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490616" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13049", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13049" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13049", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13049" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13050", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490617" } ], "notes": [ { "category": "description", "text": "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13050" }, { "category": "external", "summary": "RHBZ#1490617", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490617" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13050", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13050" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13050", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13050" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13051", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490618" } ], "notes": [ { "category": "description", "text": "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13051" }, { "category": "external", "summary": "RHBZ#1490618", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490618" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13051", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13051" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13051", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13051" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13052", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490619" } ], "notes": [ { "category": "description", "text": "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13052" }, { "category": "external", "summary": "RHBZ#1490619", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490619" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13052", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13052" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13052", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13052" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13053", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490620" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13053" }, { "category": "external", "summary": "RHBZ#1490620", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490620" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13053", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13053" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13053", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13053" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13054", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490621" } ], "notes": [ { "category": "description", "text": "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13054" }, { "category": "external", "summary": "RHBZ#1490621", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490621" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13054", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13054" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13054", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13054" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13055", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490622" } ], "notes": [ { "category": "description", "text": "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13055" }, { "category": "external", "summary": "RHBZ#1490622", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490622" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13055", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13055" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13055", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13055" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13687", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490623" } ], "notes": [ { "category": "description", "text": "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13687" }, { "category": "external", "summary": "RHBZ#1490623", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490623" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13687", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13687" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13687", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13687" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13688", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490624" } ], "notes": [ { "category": "description", "text": "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13688" }, { "category": "external", "summary": "RHBZ#1490624", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490624" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13688", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13688" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13688", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13688" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13689", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490625" } ], "notes": [ { "category": "description", "text": "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13689" }, { "category": "external", "summary": "RHBZ#1490625", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490625" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13689", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13689" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13689", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13689" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13690", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490626" } ], "notes": [ { "category": "description", "text": "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13690" }, { "category": "external", "summary": "RHBZ#1490626", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490626" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13690", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13690" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13690", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13690" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13725", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490627" } ], "notes": [ { "category": "description", "text": "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13725" }, { "category": "external", "summary": "RHBZ#1490627", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490627" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13725", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13725" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13725", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13725" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser" } ] }
rhea-2018_0705
Vulnerability from csaf_redhat
Published
2018-04-10 00:00
Modified
2024-11-22 11:30
Summary
Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update
Notes
Topic
An update for tcpdump is now available for Red Hat Enterprise Linux 7.
Details
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.
Users of tcpdump are advised to upgrade to these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for tcpdump is now available for Red Hat Enterprise Linux 7.", "title": "Topic" }, { "category": "general", "text": "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.\n\nUsers of tcpdump are advised to upgrade to these updated packages.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHEA-2018:0705", "url": "https://access.redhat.com/errata/RHEA-2018:0705" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html", "url": "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html" }, { "category": "external", "summary": "1464390", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1464390" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_0705.json" } ], "title": "Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update", "tracking": { "current_release_date": "2024-11-22T11:30:03+00:00", "generator": { "date": "2024-11-22T11:30:03+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHEA-2018:0705", "initial_release_date": "2018-04-10T00:00:00+00:00", "revision_history": [ { "date": "2018-04-10T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-04-10T11:58:24+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T11:30:03+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.x86_64", "product": { "name": "tcpdump-14:4.9.2-3.el7.x86_64", "product_id": "tcpdump-14:4.9.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=x86_64\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=x86_64\u0026epoch=14" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.src", "product": { "name": "tcpdump-14:4.9.2-3.el7.src", "product_id": "tcpdump-14:4.9.2-3.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=src\u0026epoch=14" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.s390x", "product": { "name": "tcpdump-14:4.9.2-3.el7.s390x", "product_id": "tcpdump-14:4.9.2-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=s390x\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=s390x\u0026epoch=14" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.ppc64", "product": { "name": "tcpdump-14:4.9.2-3.el7.ppc64", "product_id": "tcpdump-14:4.9.2-3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64\u0026epoch=14" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.ppc64le", "product": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le", "product_id": "tcpdump-14:4.9.2-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64le\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64le\u0026epoch=14" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.aarch64", "product": { "name": "tcpdump-14:4.9.2-3.el7.aarch64", "product_id": "tcpdump-14:4.9.2-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=aarch64\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=aarch64\u0026epoch=14" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-11108", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2017-07-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472878" } ], "notes": [ { "category": "description", "text": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11108" }, { "category": "external", "summary": "RHBZ#1472878", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472878" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11108", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11108" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11108", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11108" } ], "release_date": "2017-07-07T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function" }, { "cve": "CVE-2017-11541", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475352" } ], "notes": [ { "category": "description", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: heap-based buffer over-read in the lldp_print", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11541" }, { "category": "external", "summary": "RHBZ#1475352", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475352" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11541", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11541" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: heap-based buffer over-read in the lldp_print" }, { "cve": "CVE-2017-11542", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475355" } ], "notes": [ { "category": "description", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: heap-based buffer over-read in the pimv1_print", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11542" }, { "category": "external", "summary": "RHBZ#1475355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475355" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11542", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11542" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11542", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11542" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: heap-based buffer over-read in the pimv1_print" }, { "cve": "CVE-2017-11543", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475358" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in tcpdump\u0027s handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: buffer overflow in the sliplink_print function", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11543" }, { "category": "external", "summary": "RHBZ#1475358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475358" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11543", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11543" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11543", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11543" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: buffer overflow in the sliplink_print function" }, { "cve": "CVE-2017-11544", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475359" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in tcpdump\u0027s handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Segmentation Violation in the compressed_sl_print", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11544" }, { "category": "external", "summary": "RHBZ#1475359", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475359" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11544", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11544" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11544", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11544" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Segmentation Violation in the compressed_sl_print" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12893", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490539" } ], "notes": [ { "category": "description", "text": "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12893" }, { "category": "external", "summary": "RHBZ#1490539", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490539" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12893", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12893" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12893", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12893" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12894", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490540" } ], "notes": [ { "category": "description", "text": "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12894" }, { "category": "external", "summary": "RHBZ#1490540", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490540" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12894", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12894" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12894", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12894" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12895", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490541" } ], "notes": [ { "category": "description", "text": "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12895" }, { "category": "external", "summary": "RHBZ#1490541", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490541" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12895", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12895" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12895", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12895" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12896", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490543" } ], "notes": [ { "category": "description", "text": "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12896" }, { "category": "external", "summary": "RHBZ#1490543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12896", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12896" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12896", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12896" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12897", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490545" } ], "notes": [ { "category": "description", "text": "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12897" }, { "category": "external", "summary": "RHBZ#1490545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12897", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12897" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12897", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12897" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12898", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490546" } ], "notes": [ { "category": "description", "text": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12898" }, { "category": "external", "summary": "RHBZ#1490546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12898", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12898" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12898", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12898" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12899", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490547" } ], "notes": [ { "category": "description", "text": "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12899" }, { "category": "external", "summary": "RHBZ#1490547", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490547" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12899", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12899" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12899", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12899" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12900", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490548" } ], "notes": [ { "category": "description", "text": "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in util-print.c:tok2strbuf()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12900" }, { "category": "external", "summary": "RHBZ#1490548", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490548" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12900", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12900" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12900", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12900" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in util-print.c:tok2strbuf()" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12901", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490549" } ], "notes": [ { "category": "description", "text": "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12901" }, { "category": "external", "summary": "RHBZ#1490549", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490549" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12901", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12901" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12901", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12901" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12902", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490550" } ], "notes": [ { "category": "description", "text": "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12902" }, { "category": "external", "summary": "RHBZ#1490550", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490550" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12902", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12902" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12902", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12902" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12985", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490551" } ], "notes": [ { "category": "description", "text": "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12985" }, { "category": "external", "summary": "RHBZ#1490551", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490551" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12985", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12985" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12985", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12985" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12986", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490552" } ], "notes": [ { "category": "description", "text": "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12986" }, { "category": "external", "summary": "RHBZ#1490552", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490552" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12986", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12986" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12986", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12986" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12987", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490553" } ], "notes": [ { "category": "description", "text": "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12987" }, { "category": "external", "summary": "RHBZ#1490553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490553" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12987", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12987" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12987", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12987" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12988", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490554" } ], "notes": [ { "category": "description", "text": "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12988" }, { "category": "external", "summary": "RHBZ#1490554", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490554" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12988", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12988" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12988", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12988" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12989", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490555" } ], "notes": [ { "category": "description", "text": "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12989" }, { "category": "external", "summary": "RHBZ#1490555", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490555" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12989", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12989" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12989", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12989" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12990", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490556" } ], "notes": [ { "category": "description", "text": "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12990" }, { "category": "external", "summary": "RHBZ#1490556", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490556" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12990", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12990" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12990", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12990" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12991", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490557" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12991" }, { "category": "external", "summary": "RHBZ#1490557", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490557" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12991", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12991" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12991", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12991" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12992", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490558" } ], "notes": [ { "category": "description", "text": "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12992" }, { "category": "external", "summary": "RHBZ#1490558", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490558" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12992", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12992" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12992", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12992" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12993", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490559" } ], "notes": [ { "category": "description", "text": "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12993" }, { "category": "external", "summary": "RHBZ#1490559", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490559" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12993", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12993" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12993", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12993" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12994", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490560" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12994" }, { "category": "external", "summary": "RHBZ#1490560", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490560" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12994", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12994" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12994", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12994" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12995", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490561" } ], "notes": [ { "category": "description", "text": "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12995" }, { "category": "external", "summary": "RHBZ#1490561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490561" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12995", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12995" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12995", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12995" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12996", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490562" } ], "notes": [ { "category": "description", "text": "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12996" }, { "category": "external", "summary": "RHBZ#1490562", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490562" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12996", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12996" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12996", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12996" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12997", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490564" } ], "notes": [ { "category": "description", "text": "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12997" }, { "category": "external", "summary": "RHBZ#1490564", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490564" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12997", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12997" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12997", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12997" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12998", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490565" } ], "notes": [ { "category": "description", "text": "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12998" }, { "category": "external", "summary": "RHBZ#1490565", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490565" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12998", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12998" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12998", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12998" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12999", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490566" } ], "notes": [ { "category": "description", "text": "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12999" }, { "category": "external", "summary": "RHBZ#1490566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490566" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12999", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12999" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12999", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12999" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13000", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490567" } ], "notes": [ { "category": "description", "text": "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13000" }, { "category": "external", "summary": "RHBZ#1490567", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490567" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13000", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13000" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13000", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13000" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13001", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490568" } ], "notes": [ { "category": "description", "text": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13001" }, { "category": "external", "summary": "RHBZ#1490568", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490568" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13001", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13001" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13001", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13001" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13002", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490569" } ], "notes": [ { "category": "description", "text": "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13002" }, { "category": "external", "summary": "RHBZ#1490569", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490569" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13002", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13002" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13002", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13002" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13003", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490570" } ], "notes": [ { "category": "description", "text": "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13003" }, { "category": "external", "summary": "RHBZ#1490570", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490570" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13003", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13003" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13003", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13003" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13004", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490571" } ], "notes": [ { "category": "description", "text": "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13004" }, { "category": "external", "summary": "RHBZ#1490571", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490571" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13004", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13004" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13004", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13004" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13005", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490572" } ], "notes": [ { "category": "description", "text": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13005" }, { "category": "external", "summary": "RHBZ#1490572", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490572" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13005", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13005" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13005", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13005" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13006", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490573" } ], "notes": [ { "category": "description", "text": "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13006" }, { "category": "external", "summary": "RHBZ#1490573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490573" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13006", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13006" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13006", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13006" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13007", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490574" } ], "notes": [ { "category": "description", "text": "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13007" }, { "category": "external", "summary": "RHBZ#1490574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490574" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13007", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13007" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13008", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490575" } ], "notes": [ { "category": "description", "text": "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13008" }, { "category": "external", "summary": "RHBZ#1490575", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490575" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13008", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13008" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13008", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13008" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13009", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490576" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13009" }, { "category": "external", "summary": "RHBZ#1490576", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490576" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13009", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13009" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13009", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13009" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13010", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490577" } ], "notes": [ { "category": "description", "text": "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13010" }, { "category": "external", "summary": "RHBZ#1490577", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490577" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13010", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13010" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13010", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13010" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13011", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490578" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in tcpdump\u0027s verbose printing of packet data. A crafted pcap file or specially crafted network traffic could cause tcpdump to write out of bounds in the BSS segment, potentially causing tcpdump to display truncated or incorrectly decoded fields or crash with a segmentation violation. This does not affect tcpdump when used with the -w option to save a pcap file.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13011" }, { "category": "external", "summary": "RHBZ#1490578", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490578" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13011", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13011" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13011", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13011" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13012", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490579" } ], "notes": [ { "category": "description", "text": "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13012" }, { "category": "external", "summary": "RHBZ#1490579", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490579" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13012", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13012" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13012", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13012" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13013", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490580" } ], "notes": [ { "category": "description", "text": "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13013" }, { "category": "external", "summary": "RHBZ#1490580", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490580" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13013", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13013" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13013", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13013" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13014", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490581" } ], "notes": [ { "category": "description", "text": "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13014" }, { "category": "external", "summary": "RHBZ#1490581", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490581" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13014", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13014" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13014", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13014" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13015", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490582" } ], "notes": [ { "category": "description", "text": "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13015" }, { "category": "external", "summary": "RHBZ#1490582", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490582" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13015", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13015" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13015", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13015" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13016", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490583" } ], "notes": [ { "category": "description", "text": "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13016" }, { "category": "external", "summary": "RHBZ#1490583", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490583" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13016", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13016" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13016", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13016" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13017", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490584" } ], "notes": [ { "category": "description", "text": "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13017" }, { "category": "external", "summary": "RHBZ#1490584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490584" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13017", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13017" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13017", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13017" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13018", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490585" } ], "notes": [ { "category": "description", "text": "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13018" }, { "category": "external", "summary": "RHBZ#1490585", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490585" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13018", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13018" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13018", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13018" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13019", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490586" } ], "notes": [ { "category": "description", "text": "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13019" }, { "category": "external", "summary": "RHBZ#1490586", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490586" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13019", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13019" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13019", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13019" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13020", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490587" } ], "notes": [ { "category": "description", "text": "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13020" }, { "category": "external", "summary": "RHBZ#1490587", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490587" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13020", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13020" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13021", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490588" } ], "notes": [ { "category": "description", "text": "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13021" }, { "category": "external", "summary": "RHBZ#1490588", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490588" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13021", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13021" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13021", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13021" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13022", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490589" } ], "notes": [ { "category": "description", "text": "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13022" }, { "category": "external", "summary": "RHBZ#1490589", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490589" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13022", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13022" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13022", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13022" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13023", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490590" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13023" }, { "category": "external", "summary": "RHBZ#1490590", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490590" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13023", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13023" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13023", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13023" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13024", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490591" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13024" }, { "category": "external", "summary": "RHBZ#1490591", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490591" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13024", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13024" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13024", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13024" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13025", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490592" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13025" }, { "category": "external", "summary": "RHBZ#1490592", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490592" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13025", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13025" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13025", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13025" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13026", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490593" } ], "notes": [ { "category": "description", "text": "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13026" }, { "category": "external", "summary": "RHBZ#1490593", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490593" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13026", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13026" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13026", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13026" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13027", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490594" } ], "notes": [ { "category": "description", "text": "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13027" }, { "category": "external", "summary": "RHBZ#1490594", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490594" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13027", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13027" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13027", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13027" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13028", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490595" } ], "notes": [ { "category": "description", "text": "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13028" }, { "category": "external", "summary": "RHBZ#1490595", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490595" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13028", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13028" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13028", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13028" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13029", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490596" } ], "notes": [ { "category": "description", "text": "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13029" }, { "category": "external", "summary": "RHBZ#1490596", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490596" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13029", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13029" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13029", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13029" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13030", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490597" } ], "notes": [ { "category": "description", "text": "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13030" }, { "category": "external", "summary": "RHBZ#1490597", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490597" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13030", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13030" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13030", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13030" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13031", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490598" } ], "notes": [ { "category": "description", "text": "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13031" }, { "category": "external", "summary": "RHBZ#1490598", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490598" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13031", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13031" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13031", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13031" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13032", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490599" } ], "notes": [ { "category": "description", "text": "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13032" }, { "category": "external", "summary": "RHBZ#1490599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490599" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13032", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13032" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13032", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13032" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13033", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490600" } ], "notes": [ { "category": "description", "text": "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13033" }, { "category": "external", "summary": "RHBZ#1490600", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490600" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13033", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13033" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13033", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13033" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13034", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490601" } ], "notes": [ { "category": "description", "text": "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13034" }, { "category": "external", "summary": "RHBZ#1490601", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490601" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13034", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13034" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13034", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13034" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13035", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490602" } ], "notes": [ { "category": "description", "text": "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13035" }, { "category": "external", "summary": "RHBZ#1490602", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490602" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13035", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13035" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13035", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13035" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13036", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490603" } ], "notes": [ { "category": "description", "text": "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13036" }, { "category": "external", "summary": "RHBZ#1490603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490603" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13036", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13036" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13036", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13036" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13037", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490604" } ], "notes": [ { "category": "description", "text": "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13037" }, { "category": "external", "summary": "RHBZ#1490604", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490604" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13037", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13037" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13037", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13037" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13038", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490605" } ], "notes": [ { "category": "description", "text": "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13038" }, { "category": "external", "summary": "RHBZ#1490605", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490605" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13038", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13038" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13038", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13038" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13039", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490606" } ], "notes": [ { "category": "description", "text": "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13039" }, { "category": "external", "summary": "RHBZ#1490606", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490606" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13039", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13039" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13039", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13039" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13040", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490607" } ], "notes": [ { "category": "description", "text": "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13040" }, { "category": "external", "summary": "RHBZ#1490607", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490607" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13040", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13040" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13040" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13041", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490608" } ], "notes": [ { "category": "description", "text": "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13041" }, { "category": "external", "summary": "RHBZ#1490608", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490608" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13041", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13041" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13041", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13041" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13042", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490609" } ], "notes": [ { "category": "description", "text": "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13042" }, { "category": "external", "summary": "RHBZ#1490609", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490609" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13042", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13042" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13042", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13042" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13043", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490610" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13043" }, { "category": "external", "summary": "RHBZ#1490610", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490610" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13043", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13043" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13043", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13043" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13044", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490611" } ], "notes": [ { "category": "description", "text": "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13044" }, { "category": "external", "summary": "RHBZ#1490611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490611" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13044", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13044" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13044", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13044" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13045", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490612" } ], "notes": [ { "category": "description", "text": "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13045" }, { "category": "external", "summary": "RHBZ#1490612", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490612" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13045", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13045" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13045", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13045" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13046", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490613" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13046" }, { "category": "external", "summary": "RHBZ#1490613", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490613" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13046", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13046" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13046", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13046" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13047", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490614" } ], "notes": [ { "category": "description", "text": "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13047" }, { "category": "external", "summary": "RHBZ#1490614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490614" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13047", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13047" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13047", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13047" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13048", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490615" } ], "notes": [ { "category": "description", "text": "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13048" }, { "category": "external", "summary": "RHBZ#1490615", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490615" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13048", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13048" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13048", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13048" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13049", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490616" } ], "notes": [ { "category": "description", "text": "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13049" }, { "category": "external", "summary": "RHBZ#1490616", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490616" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13049", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13049" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13049", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13049" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13050", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490617" } ], "notes": [ { "category": "description", "text": "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13050" }, { "category": "external", "summary": "RHBZ#1490617", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490617" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13050", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13050" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13050", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13050" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13051", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490618" } ], "notes": [ { "category": "description", "text": "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13051" }, { "category": "external", "summary": "RHBZ#1490618", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490618" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13051", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13051" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13051", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13051" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13052", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490619" } ], "notes": [ { "category": "description", "text": "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13052" }, { "category": "external", "summary": "RHBZ#1490619", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490619" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13052", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13052" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13052", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13052" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13053", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490620" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13053" }, { "category": "external", "summary": "RHBZ#1490620", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490620" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13053", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13053" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13053", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13053" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13054", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490621" } ], "notes": [ { "category": "description", "text": "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13054" }, { "category": "external", "summary": "RHBZ#1490621", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490621" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13054", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13054" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13054", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13054" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13055", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490622" } ], "notes": [ { "category": "description", "text": "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13055" }, { "category": "external", "summary": "RHBZ#1490622", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490622" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13055", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13055" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13055", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13055" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13687", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490623" } ], "notes": [ { "category": "description", "text": "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13687" }, { "category": "external", "summary": "RHBZ#1490623", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490623" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13687", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13687" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13687", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13687" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13688", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490624" } ], "notes": [ { "category": "description", "text": "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13688" }, { "category": "external", "summary": "RHBZ#1490624", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490624" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13688", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13688" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13688", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13688" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13689", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490625" } ], "notes": [ { "category": "description", "text": "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13689" }, { "category": "external", "summary": "RHBZ#1490625", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490625" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13689", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13689" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13689", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13689" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13690", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490626" } ], "notes": [ { "category": "description", "text": "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13690" }, { "category": "external", "summary": "RHBZ#1490626", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490626" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13690", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13690" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13690", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13690" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13725", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490627" } ], "notes": [ { "category": "description", "text": "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13725" }, { "category": "external", "summary": "RHBZ#1490627", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490627" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13725", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13725" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13725", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13725" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser" } ] }
rhea-2018:0705
Vulnerability from csaf_redhat
Published
2018-04-10 00:00
Modified
2024-11-22 11:30
Summary
Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update
Notes
Topic
An update for tcpdump is now available for Red Hat Enterprise Linux 7.
Details
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.
Users of tcpdump are advised to upgrade to these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for tcpdump is now available for Red Hat Enterprise Linux 7.", "title": "Topic" }, { "category": "general", "text": "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.\n\nUsers of tcpdump are advised to upgrade to these updated packages.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHEA-2018:0705", "url": "https://access.redhat.com/errata/RHEA-2018:0705" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html", "url": "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html" }, { "category": "external", "summary": "1464390", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1464390" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_0705.json" } ], "title": "Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update", "tracking": { "current_release_date": "2024-11-22T11:30:03+00:00", "generator": { "date": "2024-11-22T11:30:03+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHEA-2018:0705", "initial_release_date": "2018-04-10T00:00:00+00:00", "revision_history": [ { "date": "2018-04-10T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-04-10T11:58:24+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T11:30:03+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.x86_64", "product": { "name": "tcpdump-14:4.9.2-3.el7.x86_64", "product_id": "tcpdump-14:4.9.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=x86_64\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=x86_64\u0026epoch=14" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.src", "product": { "name": "tcpdump-14:4.9.2-3.el7.src", "product_id": "tcpdump-14:4.9.2-3.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=src\u0026epoch=14" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.s390x", "product": { "name": "tcpdump-14:4.9.2-3.el7.s390x", "product_id": "tcpdump-14:4.9.2-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=s390x\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=s390x\u0026epoch=14" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.ppc64", "product": { "name": "tcpdump-14:4.9.2-3.el7.ppc64", "product_id": "tcpdump-14:4.9.2-3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64\u0026epoch=14" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.ppc64le", "product": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le", "product_id": "tcpdump-14:4.9.2-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64le\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64le\u0026epoch=14" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "tcpdump-14:4.9.2-3.el7.aarch64", "product": { "name": "tcpdump-14:4.9.2-3.el7.aarch64", "product_id": "tcpdump-14:4.9.2-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=aarch64\u0026epoch=14" } } }, { "category": "product_version", "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "product": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "product_id": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=aarch64\u0026epoch=14" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Client-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", "product_id": "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src" }, "product_reference": "tcpdump-14:4.9.2-3.el7.src", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5" }, { "category": "default_component_of", "full_product_name": { "name": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" }, "product_reference": "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-11108", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2017-07-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472878" } ], "notes": [ { "category": "description", "text": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11108" }, { "category": "external", "summary": "RHBZ#1472878", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472878" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11108", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11108" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11108", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11108" } ], "release_date": "2017-07-07T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function" }, { "cve": "CVE-2017-11541", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475352" } ], "notes": [ { "category": "description", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: heap-based buffer over-read in the lldp_print", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11541" }, { "category": "external", "summary": "RHBZ#1475352", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475352" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11541", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11541" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: heap-based buffer over-read in the lldp_print" }, { "cve": "CVE-2017-11542", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475355" } ], "notes": [ { "category": "description", "text": "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: heap-based buffer over-read in the pimv1_print", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11542" }, { "category": "external", "summary": "RHBZ#1475355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475355" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11542", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11542" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11542", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11542" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: heap-based buffer over-read in the pimv1_print" }, { "cve": "CVE-2017-11543", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475358" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in tcpdump\u0027s handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: buffer overflow in the sliplink_print function", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11543" }, { "category": "external", "summary": "RHBZ#1475358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475358" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11543", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11543" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11543", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11543" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: buffer overflow in the sliplink_print function" }, { "cve": "CVE-2017-11544", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-07-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1475359" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in tcpdump\u0027s handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Segmentation Violation in the compressed_sl_print", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-11544" }, { "category": "external", "summary": "RHBZ#1475359", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475359" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-11544", "url": "https://www.cve.org/CVERecord?id=CVE-2017-11544" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-11544", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11544" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Segmentation Violation in the compressed_sl_print" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12893", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490539" } ], "notes": [ { "category": "description", "text": "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12893" }, { "category": "external", "summary": "RHBZ#1490539", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490539" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12893", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12893" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12893", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12893" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12894", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490540" } ], "notes": [ { "category": "description", "text": "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12894" }, { "category": "external", "summary": "RHBZ#1490540", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490540" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12894", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12894" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12894", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12894" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12895", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490541" } ], "notes": [ { "category": "description", "text": "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12895" }, { "category": "external", "summary": "RHBZ#1490541", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490541" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12895", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12895" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12895", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12895" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12896", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490543" } ], "notes": [ { "category": "description", "text": "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12896" }, { "category": "external", "summary": "RHBZ#1490543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12896", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12896" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12896", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12896" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12897", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490545" } ], "notes": [ { "category": "description", "text": "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12897" }, { "category": "external", "summary": "RHBZ#1490545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12897", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12897" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12897", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12897" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12898", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490546" } ], "notes": [ { "category": "description", "text": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12898" }, { "category": "external", "summary": "RHBZ#1490546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12898", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12898" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12898", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12898" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12899", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490547" } ], "notes": [ { "category": "description", "text": "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12899" }, { "category": "external", "summary": "RHBZ#1490547", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490547" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12899", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12899" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12899", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12899" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12900", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490548" } ], "notes": [ { "category": "description", "text": "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in util-print.c:tok2strbuf()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12900" }, { "category": "external", "summary": "RHBZ#1490548", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490548" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12900", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12900" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12900", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12900" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in util-print.c:tok2strbuf()" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12901", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490549" } ], "notes": [ { "category": "description", "text": "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12901" }, { "category": "external", "summary": "RHBZ#1490549", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490549" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12901", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12901" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12901", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12901" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12902", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490550" } ], "notes": [ { "category": "description", "text": "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12902" }, { "category": "external", "summary": "RHBZ#1490550", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490550" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12902", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12902" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12902", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12902" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12985", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490551" } ], "notes": [ { "category": "description", "text": "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12985" }, { "category": "external", "summary": "RHBZ#1490551", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490551" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12985", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12985" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12985", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12985" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12986", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490552" } ], "notes": [ { "category": "description", "text": "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12986" }, { "category": "external", "summary": "RHBZ#1490552", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490552" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12986", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12986" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12986", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12986" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12987", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490553" } ], "notes": [ { "category": "description", "text": "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12987" }, { "category": "external", "summary": "RHBZ#1490553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490553" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12987", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12987" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12987", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12987" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12988", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490554" } ], "notes": [ { "category": "description", "text": "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12988" }, { "category": "external", "summary": "RHBZ#1490554", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490554" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12988", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12988" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12988", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12988" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12989", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490555" } ], "notes": [ { "category": "description", "text": "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12989" }, { "category": "external", "summary": "RHBZ#1490555", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490555" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12989", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12989" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12989", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12989" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12990", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490556" } ], "notes": [ { "category": "description", "text": "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12990" }, { "category": "external", "summary": "RHBZ#1490556", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490556" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12990", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12990" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12990", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12990" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12991", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490557" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12991" }, { "category": "external", "summary": "RHBZ#1490557", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490557" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12991", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12991" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12991", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12991" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12992", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490558" } ], "notes": [ { "category": "description", "text": "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12992" }, { "category": "external", "summary": "RHBZ#1490558", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490558" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12992", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12992" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12992", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12992" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12993", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490559" } ], "notes": [ { "category": "description", "text": "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12993" }, { "category": "external", "summary": "RHBZ#1490559", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490559" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12993", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12993" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12993", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12993" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12994", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490560" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12994" }, { "category": "external", "summary": "RHBZ#1490560", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490560" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12994", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12994" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12994", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12994" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12995", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490561" } ], "notes": [ { "category": "description", "text": "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12995" }, { "category": "external", "summary": "RHBZ#1490561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490561" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12995", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12995" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12995", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12995" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12996", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490562" } ], "notes": [ { "category": "description", "text": "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12996" }, { "category": "external", "summary": "RHBZ#1490562", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490562" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12996", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12996" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12996", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12996" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12997", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490564" } ], "notes": [ { "category": "description", "text": "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12997" }, { "category": "external", "summary": "RHBZ#1490564", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490564" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12997", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12997" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12997", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12997" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12998", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490565" } ], "notes": [ { "category": "description", "text": "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12998" }, { "category": "external", "summary": "RHBZ#1490565", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490565" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12998", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12998" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12998", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12998" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-12999", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490566" } ], "notes": [ { "category": "description", "text": "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-12999" }, { "category": "external", "summary": "RHBZ#1490566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490566" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-12999", "url": "https://www.cve.org/CVERecord?id=CVE-2017-12999" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12999", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12999" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13000", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490567" } ], "notes": [ { "category": "description", "text": "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13000" }, { "category": "external", "summary": "RHBZ#1490567", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490567" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13000", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13000" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13000", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13000" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13001", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490568" } ], "notes": [ { "category": "description", "text": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13001" }, { "category": "external", "summary": "RHBZ#1490568", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490568" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13001", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13001" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13001", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13001" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13002", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490569" } ], "notes": [ { "category": "description", "text": "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13002" }, { "category": "external", "summary": "RHBZ#1490569", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490569" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13002", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13002" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13002", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13002" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13003", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490570" } ], "notes": [ { "category": "description", "text": "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13003" }, { "category": "external", "summary": "RHBZ#1490570", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490570" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13003", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13003" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13003", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13003" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13004", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490571" } ], "notes": [ { "category": "description", "text": "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13004" }, { "category": "external", "summary": "RHBZ#1490571", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490571" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13004", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13004" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13004", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13004" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13005", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490572" } ], "notes": [ { "category": "description", "text": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13005" }, { "category": "external", "summary": "RHBZ#1490572", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490572" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13005", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13005" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13005", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13005" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13006", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490573" } ], "notes": [ { "category": "description", "text": "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13006" }, { "category": "external", "summary": "RHBZ#1490573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490573" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13006", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13006" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13006", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13006" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13007", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490574" } ], "notes": [ { "category": "description", "text": "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13007" }, { "category": "external", "summary": "RHBZ#1490574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490574" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13007", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13007" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13008", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490575" } ], "notes": [ { "category": "description", "text": "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13008" }, { "category": "external", "summary": "RHBZ#1490575", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490575" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13008", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13008" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13008", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13008" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13009", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490576" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13009" }, { "category": "external", "summary": "RHBZ#1490576", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490576" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13009", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13009" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13009", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13009" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13010", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490577" } ], "notes": [ { "category": "description", "text": "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13010" }, { "category": "external", "summary": "RHBZ#1490577", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490577" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13010", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13010" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13010", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13010" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13011", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490578" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in tcpdump\u0027s verbose printing of packet data. A crafted pcap file or specially crafted network traffic could cause tcpdump to write out of bounds in the BSS segment, potentially causing tcpdump to display truncated or incorrectly decoded fields or crash with a segmentation violation. This does not affect tcpdump when used with the -w option to save a pcap file.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13011" }, { "category": "external", "summary": "RHBZ#1490578", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490578" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13011", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13011" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13011", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13011" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13012", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490579" } ], "notes": [ { "category": "description", "text": "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13012" }, { "category": "external", "summary": "RHBZ#1490579", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490579" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13012", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13012" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13012", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13012" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13013", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490580" } ], "notes": [ { "category": "description", "text": "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13013" }, { "category": "external", "summary": "RHBZ#1490580", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490580" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13013", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13013" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13013", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13013" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13014", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490581" } ], "notes": [ { "category": "description", "text": "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13014" }, { "category": "external", "summary": "RHBZ#1490581", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490581" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13014", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13014" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13014", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13014" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13015", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490582" } ], "notes": [ { "category": "description", "text": "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13015" }, { "category": "external", "summary": "RHBZ#1490582", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490582" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13015", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13015" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13015", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13015" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13016", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490583" } ], "notes": [ { "category": "description", "text": "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13016" }, { "category": "external", "summary": "RHBZ#1490583", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490583" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13016", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13016" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13016", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13016" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13017", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490584" } ], "notes": [ { "category": "description", "text": "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13017" }, { "category": "external", "summary": "RHBZ#1490584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490584" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13017", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13017" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13017", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13017" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13018", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490585" } ], "notes": [ { "category": "description", "text": "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13018" }, { "category": "external", "summary": "RHBZ#1490585", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490585" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13018", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13018" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13018", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13018" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13019", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490586" } ], "notes": [ { "category": "description", "text": "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13019" }, { "category": "external", "summary": "RHBZ#1490586", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490586" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13019", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13019" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13019", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13019" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13020", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490587" } ], "notes": [ { "category": "description", "text": "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13020" }, { "category": "external", "summary": "RHBZ#1490587", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490587" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13020", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13020" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13021", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490588" } ], "notes": [ { "category": "description", "text": "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13021" }, { "category": "external", "summary": "RHBZ#1490588", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490588" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13021", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13021" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13021", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13021" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13022", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490589" } ], "notes": [ { "category": "description", "text": "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13022" }, { "category": "external", "summary": "RHBZ#1490589", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490589" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13022", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13022" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13022", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13022" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13023", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490590" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13023" }, { "category": "external", "summary": "RHBZ#1490590", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490590" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13023", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13023" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13023", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13023" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13024", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490591" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13024" }, { "category": "external", "summary": "RHBZ#1490591", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490591" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13024", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13024" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13024", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13024" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13025", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490592" } ], "notes": [ { "category": "description", "text": "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13025" }, { "category": "external", "summary": "RHBZ#1490592", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490592" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13025", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13025" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13025", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13025" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13026", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490593" } ], "notes": [ { "category": "description", "text": "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13026" }, { "category": "external", "summary": "RHBZ#1490593", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490593" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13026", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13026" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13026", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13026" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13027", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490594" } ], "notes": [ { "category": "description", "text": "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13027" }, { "category": "external", "summary": "RHBZ#1490594", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490594" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13027", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13027" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13027", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13027" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13028", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490595" } ], "notes": [ { "category": "description", "text": "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13028" }, { "category": "external", "summary": "RHBZ#1490595", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490595" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13028", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13028" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13028", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13028" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13029", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490596" } ], "notes": [ { "category": "description", "text": "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13029" }, { "category": "external", "summary": "RHBZ#1490596", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490596" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13029", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13029" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13029", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13029" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13030", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490597" } ], "notes": [ { "category": "description", "text": "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13030" }, { "category": "external", "summary": "RHBZ#1490597", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490597" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13030", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13030" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13030", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13030" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13031", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490598" } ], "notes": [ { "category": "description", "text": "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13031" }, { "category": "external", "summary": "RHBZ#1490598", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490598" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13031", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13031" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13031", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13031" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13032", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490599" } ], "notes": [ { "category": "description", "text": "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13032" }, { "category": "external", "summary": "RHBZ#1490599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490599" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13032", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13032" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13032", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13032" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13033", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490600" } ], "notes": [ { "category": "description", "text": "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13033" }, { "category": "external", "summary": "RHBZ#1490600", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490600" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13033", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13033" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13033", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13033" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13034", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490601" } ], "notes": [ { "category": "description", "text": "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13034" }, { "category": "external", "summary": "RHBZ#1490601", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490601" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13034", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13034" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13034", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13034" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13035", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490602" } ], "notes": [ { "category": "description", "text": "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13035" }, { "category": "external", "summary": "RHBZ#1490602", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490602" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13035", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13035" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13035", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13035" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13036", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490603" } ], "notes": [ { "category": "description", "text": "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13036" }, { "category": "external", "summary": "RHBZ#1490603", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490603" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13036", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13036" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13036", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13036" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13037", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490604" } ], "notes": [ { "category": "description", "text": "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13037" }, { "category": "external", "summary": "RHBZ#1490604", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490604" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13037", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13037" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13037", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13037" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13038", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490605" } ], "notes": [ { "category": "description", "text": "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13038" }, { "category": "external", "summary": "RHBZ#1490605", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490605" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13038", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13038" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13038", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13038" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13039", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490606" } ], "notes": [ { "category": "description", "text": "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13039" }, { "category": "external", "summary": "RHBZ#1490606", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490606" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13039", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13039" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13039", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13039" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13040", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490607" } ], "notes": [ { "category": "description", "text": "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13040" }, { "category": "external", "summary": "RHBZ#1490607", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490607" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13040", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13040" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13040" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13041", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490608" } ], "notes": [ { "category": "description", "text": "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13041" }, { "category": "external", "summary": "RHBZ#1490608", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490608" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13041", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13041" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13041", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13041" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13042", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490609" } ], "notes": [ { "category": "description", "text": "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13042" }, { "category": "external", "summary": "RHBZ#1490609", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490609" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13042", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13042" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13042", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13042" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13043", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490610" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13043" }, { "category": "external", "summary": "RHBZ#1490610", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490610" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13043", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13043" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13043", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13043" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13044", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490611" } ], "notes": [ { "category": "description", "text": "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13044" }, { "category": "external", "summary": "RHBZ#1490611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490611" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13044", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13044" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13044", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13044" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13045", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490612" } ], "notes": [ { "category": "description", "text": "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13045" }, { "category": "external", "summary": "RHBZ#1490612", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490612" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13045", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13045" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13045", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13045" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13046", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490613" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13046" }, { "category": "external", "summary": "RHBZ#1490613", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490613" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13046", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13046" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13046", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13046" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13047", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490614" } ], "notes": [ { "category": "description", "text": "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13047" }, { "category": "external", "summary": "RHBZ#1490614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490614" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13047", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13047" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13047", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13047" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13048", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490615" } ], "notes": [ { "category": "description", "text": "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13048" }, { "category": "external", "summary": "RHBZ#1490615", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490615" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13048", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13048" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13048", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13048" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13049", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490616" } ], "notes": [ { "category": "description", "text": "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13049" }, { "category": "external", "summary": "RHBZ#1490616", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490616" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13049", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13049" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13049", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13049" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13050", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490617" } ], "notes": [ { "category": "description", "text": "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13050" }, { "category": "external", "summary": "RHBZ#1490617", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490617" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13050", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13050" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13050", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13050" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13051", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490618" } ], "notes": [ { "category": "description", "text": "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13051" }, { "category": "external", "summary": "RHBZ#1490618", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490618" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13051", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13051" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13051", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13051" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13052", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490619" } ], "notes": [ { "category": "description", "text": "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13052" }, { "category": "external", "summary": "RHBZ#1490619", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490619" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13052", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13052" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13052", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13052" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13053", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490620" } ], "notes": [ { "category": "description", "text": "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13053" }, { "category": "external", "summary": "RHBZ#1490620", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490620" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13053", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13053" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13053", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13053" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13054", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490621" } ], "notes": [ { "category": "description", "text": "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13054" }, { "category": "external", "summary": "RHBZ#1490621", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490621" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13054", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13054" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13054", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13054" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13055", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490622" } ], "notes": [ { "category": "description", "text": "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13055" }, { "category": "external", "summary": "RHBZ#1490622", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490622" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13055", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13055" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13055", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13055" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13687", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490623" } ], "notes": [ { "category": "description", "text": "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13687" }, { "category": "external", "summary": "RHBZ#1490623", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490623" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13687", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13687" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13687", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13687" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13688", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490624" } ], "notes": [ { "category": "description", "text": "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13688" }, { "category": "external", "summary": "RHBZ#1490624", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490624" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13688", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13688" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13688", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13688" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13689", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490625" } ], "notes": [ { "category": "description", "text": "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13689" }, { "category": "external", "summary": "RHBZ#1490625", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490625" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13689", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13689" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13689", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13689" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13690", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490626" } ], "notes": [ { "category": "description", "text": "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13690" }, { "category": "external", "summary": "RHBZ#1490626", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490626" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13690", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13690" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13690", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13690" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser" }, { "acknowledgments": [ { "names": [ "the Tcpdump project" ] } ], "cve": "CVE-2017-13725", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1490627" } ], "notes": [ { "category": "description", "text": "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", "title": "Vulnerability description" }, { "category": "summary", "text": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-13725" }, { "category": "external", "summary": "RHBZ#1490627", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1490627" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-13725", "url": "https://www.cve.org/CVERecord?id=CVE-2017-13725" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-13725", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13725" } ], "release_date": "2017-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-10T00:00:00+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser" } ] }
CVE-2017-11108
Vulnerability from fkie_nvd
Published
2017-07-08 17:29
Modified
2024-11-21 03:07
Severity ?
Summary
tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
References
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "A6BE599F-A3FF-402C-A2C8-119B5E81CE8C", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol." }, { "lang": "es", "value": "tcpdump 4.9.0 permite que atacantes remotos provoquen una denegaci\u00f3n de servicio (sobrelectura de b\u00fafer basada en memoria din\u00e1mica o heap y cierre inesperado de aplicaci\u00f3n) mediante datos de paquetes manipulados. El cierre inesperado ocurre en la funci\u00f3n EXTRACT_16BITS que es llamada desde la funci\u00f3n stp_print por el protocolo Spanning Tree (STP)." } ], "id": "CVE-2017-11108", "lastModified": "2024-11-21T03:07:06.830", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV30": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2017-07-08T17:29:00.197", "references": [ { "source": "cve@mitre.org", "url": "http://www.debian.org/security/2017/dsa-3971" }, { "source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHEA-2018:0705" }, { "source": "cve@mitre.org", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504" }, { "source": "cve@mitre.org", "url": "https://security.gentoo.org/glsa/201709-23" }, { "source": "cve@mitre.org", "url": "https://support.apple.com/HT208221" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2017/dsa-3971" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://access.redhat.com/errata/RHEA-2018:0705" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/201709-23" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/HT208221" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
gsd-2017-11108
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2017-11108", "description": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "id": "GSD-2017-11108", "references": [ "https://www.suse.com/security/cve/CVE-2017-11108.html", "https://www.debian.org/security/2017/dsa-3971", "https://access.redhat.com/errata/RHEA-2018:0705", "https://ubuntu.com/security/CVE-2017-11108", "https://advisories.mageia.org/CVE-2017-11108.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2017-11108" ], "details": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", "id": "GSD-2017-11108", "modified": "2023-12-13T01:21:15.444832Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-11108", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "GLSA-201709-23", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201709-23" }, { "name": "https://support.apple.com/HT208221", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208221" }, { "name": "DSA-3971", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2017/dsa-3971" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504" }, { "name": "RHEA-2018:0705", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-11108" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-125" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504", "refsource": "MISC", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1468504" }, { "name": "GLSA-201709-23", "refsource": "GENTOO", "tags": [], "url": "https://security.gentoo.org/glsa/201709-23" }, { "name": "DSA-3971", "refsource": "DEBIAN", "tags": [], "url": "http://www.debian.org/security/2017/dsa-3971" }, { "name": "https://support.apple.com/HT208221", "refsource": "CONFIRM", "tags": [], "url": "https://support.apple.com/HT208221" }, { "name": "RHEA-2018:0705", "refsource": "REDHAT", "tags": [], "url": "https://access.redhat.com/errata/RHEA-2018:0705" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 3.6 } }, "lastModifiedDate": "2019-10-03T00:03Z", "publishedDate": "2017-07-08T17:29Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.