Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2017-5202
Vulnerability from cvelistv5
Published
2017-01-28 01:33
Modified
2024-08-05 14:55
Severity ?
EPSS score ?
1.07%
(0.75849)
Summary
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-05T14:55:35.454Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "1037755", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1037755", }, { name: "DSA-3775", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "http://www.debian.org/security/2017/dsa-3775", }, { name: "RHSA-2017:1871", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html", }, { name: "95852", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/95852", }, { name: "GLSA-201702-30", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "https://security.gentoo.org/glsa/201702-30", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2017-01-27T00:00:00", descriptions: [ { lang: "en", value: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2018-01-04T19:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { name: "1037755", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1037755", }, { name: "DSA-3775", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "http://www.debian.org/security/2017/dsa-3775", }, { name: "RHSA-2017:1871", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html", }, { name: "95852", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/95852", }, { name: "GLSA-201702-30", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "https://security.gentoo.org/glsa/201702-30", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2017-5202", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "1037755", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1037755", }, { name: "DSA-3775", refsource: "DEBIAN", url: "http://www.debian.org/security/2017/dsa-3775", }, { name: "RHSA-2017:1871", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { name: "https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1494526.html", refsource: "CONFIRM", url: "https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1494526.html", }, { name: "95852", refsource: "BID", url: "http://www.securityfocus.com/bid/95852", }, { name: "GLSA-201702-30", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201702-30", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2017-5202", datePublished: "2017-01-28T01:33:00", dateReserved: "2017-01-06T00:00:00", dateUpdated: "2024-08-05T14:55:35.454Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { fkie_nvd: { configurations: "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.9.0\", \"matchCriteriaId\": \"F796C610-BB37-48CD-8B65-DA81617A5449\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33C068A4-3780-4EAB-A937-6082DF847564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"51EF4996-72F4-4FA4-814F-F5991E7A8318\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D99A687E-EAE6-417E-A88E-D0082BC194CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B353CE99-D57C-465B-AAB0-73EF581127D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BF77CDCF-B9C9-427D-B2BF-36650FB2148C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}]", descriptions: "[{\"lang\": \"en\", \"value\": \"The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().\"}, {\"lang\": \"es\", \"value\": \"El analizador ISO CLNS en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de b\\u00fafer en print-isoclns.c:clnp_print().\"}]", id: "CVE-2017-5202", lastModified: "2024-11-21T03:27:15.903", metrics: "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": true, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}", published: "2017-01-28T01:59:01.047", references: "[{\"url\": \"http://www.debian.org/security/2017/dsa-3775\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/95852\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1037755\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1871\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201702-30\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2017/dsa-3775\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/95852\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1037755\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1871\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201702-30\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]", sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]", }, nvd: "{\"cve\":{\"id\":\"CVE-2017-5202\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-01-28T01:59:01.047\",\"lastModified\":\"2024-11-21T03:27:15.903\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().\"},{\"lang\":\"es\",\"value\":\"El analizador ISO CLNS en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-isoclns.c:clnp_print().\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.9.0\",\"matchCriteriaId\":\"F796C610-BB37-48CD-8B65-DA81617A5449\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D99A687E-EAE6-417E-A88E-D0082BC194CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B353CE99-D57C-465B-AAB0-73EF581127D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF77CDCF-B9C9-427D-B2BF-36650FB2148C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}],\"references\":[{\"url\":\"http://www.debian.org/security/2017/dsa-3775\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95852\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037755\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1871\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201702-30\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2017/dsa-3775\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95852\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037755\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1871\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201702-30\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
opensuse-su-2024:11425-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
tcpdump-4.99.1-1.2 on GA media
Notes
Title of the patch
tcpdump-4.99.1-1.2 on GA media
Description of the patch
These are all security issues fixed in the tcpdump-4.99.1-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11425
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "tcpdump-4.99.1-1.2 on GA media", title: "Title of the patch", }, { category: "description", text: "These are all security issues fixed in the tcpdump-4.99.1-1.2 package on the GA media of openSUSE Tumbleweed.", title: "Description of the patch", }, { category: "details", text: "openSUSE-Tumbleweed-2024-11425", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11425-1.json", }, { category: "self", summary: "SUSE CVE CVE-2016-7922 page", url: "https://www.suse.com/security/cve/CVE-2016-7922/", }, { category: "self", summary: "SUSE CVE CVE-2016-7923 page", url: "https://www.suse.com/security/cve/CVE-2016-7923/", }, { category: "self", summary: "SUSE CVE CVE-2016-7924 page", url: "https://www.suse.com/security/cve/CVE-2016-7924/", }, { category: "self", summary: "SUSE CVE CVE-2016-7925 page", url: "https://www.suse.com/security/cve/CVE-2016-7925/", }, { category: "self", summary: "SUSE CVE CVE-2016-7926 page", url: "https://www.suse.com/security/cve/CVE-2016-7926/", }, { category: "self", summary: "SUSE CVE CVE-2016-7927 page", url: "https://www.suse.com/security/cve/CVE-2016-7927/", }, { category: "self", summary: "SUSE CVE CVE-2016-7928 page", url: "https://www.suse.com/security/cve/CVE-2016-7928/", }, { category: "self", summary: "SUSE CVE CVE-2016-7929 page", url: "https://www.suse.com/security/cve/CVE-2016-7929/", }, { category: "self", summary: "SUSE CVE CVE-2016-7930 page", url: "https://www.suse.com/security/cve/CVE-2016-7930/", }, { category: "self", summary: "SUSE CVE CVE-2016-7931 page", url: "https://www.suse.com/security/cve/CVE-2016-7931/", }, { category: "self", summary: "SUSE CVE CVE-2016-7932 page", url: "https://www.suse.com/security/cve/CVE-2016-7932/", }, { category: "self", summary: "SUSE CVE CVE-2016-7933 page", url: "https://www.suse.com/security/cve/CVE-2016-7933/", }, { category: "self", summary: "SUSE CVE CVE-2016-7934 page", url: "https://www.suse.com/security/cve/CVE-2016-7934/", }, { category: "self", summary: "SUSE CVE CVE-2016-7935 page", url: "https://www.suse.com/security/cve/CVE-2016-7935/", }, { category: "self", summary: "SUSE CVE CVE-2016-7936 page", url: "https://www.suse.com/security/cve/CVE-2016-7936/", }, { category: "self", summary: "SUSE CVE CVE-2016-7937 page", url: "https://www.suse.com/security/cve/CVE-2016-7937/", }, { category: "self", summary: "SUSE CVE CVE-2016-7938 page", url: "https://www.suse.com/security/cve/CVE-2016-7938/", }, { category: "self", summary: "SUSE CVE CVE-2016-7939 page", url: "https://www.suse.com/security/cve/CVE-2016-7939/", }, { category: "self", summary: "SUSE CVE CVE-2016-7940 page", url: "https://www.suse.com/security/cve/CVE-2016-7940/", }, { category: "self", summary: "SUSE CVE CVE-2016-7973 page", url: "https://www.suse.com/security/cve/CVE-2016-7973/", }, { category: "self", summary: "SUSE CVE CVE-2016-7974 page", url: "https://www.suse.com/security/cve/CVE-2016-7974/", }, { category: "self", summary: "SUSE CVE CVE-2016-7975 page", url: "https://www.suse.com/security/cve/CVE-2016-7975/", }, { category: "self", summary: "SUSE CVE CVE-2016-7983 page", url: "https://www.suse.com/security/cve/CVE-2016-7983/", }, { category: "self", summary: "SUSE CVE CVE-2016-7984 page", url: "https://www.suse.com/security/cve/CVE-2016-7984/", }, { category: "self", summary: "SUSE CVE CVE-2016-7985 page", url: "https://www.suse.com/security/cve/CVE-2016-7985/", }, { category: "self", summary: "SUSE CVE CVE-2016-7986 page", url: "https://www.suse.com/security/cve/CVE-2016-7986/", }, { category: "self", summary: "SUSE CVE CVE-2016-7992 page", url: "https://www.suse.com/security/cve/CVE-2016-7992/", }, { category: "self", summary: "SUSE CVE CVE-2016-7993 page", url: "https://www.suse.com/security/cve/CVE-2016-7993/", }, { category: "self", summary: "SUSE CVE CVE-2016-8574 page", url: "https://www.suse.com/security/cve/CVE-2016-8574/", }, { category: "self", summary: "SUSE CVE CVE-2016-8575 page", url: "https://www.suse.com/security/cve/CVE-2016-8575/", }, { category: "self", summary: "SUSE CVE CVE-2017-11108 page", url: "https://www.suse.com/security/cve/CVE-2017-11108/", }, { category: "self", summary: "SUSE CVE CVE-2017-11541 page", url: "https://www.suse.com/security/cve/CVE-2017-11541/", }, { category: "self", summary: "SUSE CVE CVE-2017-11542 page", url: "https://www.suse.com/security/cve/CVE-2017-11542/", }, { category: "self", summary: "SUSE CVE CVE-2017-11543 page", url: "https://www.suse.com/security/cve/CVE-2017-11543/", }, { category: "self", summary: "SUSE CVE CVE-2017-12893 page", url: "https://www.suse.com/security/cve/CVE-2017-12893/", }, { category: "self", summary: "SUSE CVE CVE-2017-12894 page", url: "https://www.suse.com/security/cve/CVE-2017-12894/", }, { category: "self", summary: "SUSE CVE CVE-2017-12895 page", url: "https://www.suse.com/security/cve/CVE-2017-12895/", }, { category: "self", summary: "SUSE CVE CVE-2017-12896 page", url: "https://www.suse.com/security/cve/CVE-2017-12896/", }, { category: "self", summary: "SUSE CVE CVE-2017-12897 page", url: "https://www.suse.com/security/cve/CVE-2017-12897/", }, { category: "self", summary: "SUSE CVE CVE-2017-12898 page", url: "https://www.suse.com/security/cve/CVE-2017-12898/", }, { category: "self", summary: "SUSE CVE CVE-2017-12899 page", url: "https://www.suse.com/security/cve/CVE-2017-12899/", }, { category: "self", summary: "SUSE CVE CVE-2017-12900 page", url: "https://www.suse.com/security/cve/CVE-2017-12900/", }, { category: "self", summary: "SUSE CVE CVE-2017-12901 page", url: "https://www.suse.com/security/cve/CVE-2017-12901/", }, { category: "self", summary: "SUSE CVE CVE-2017-12902 page", url: "https://www.suse.com/security/cve/CVE-2017-12902/", }, { category: "self", summary: "SUSE CVE CVE-2017-12985 page", url: "https://www.suse.com/security/cve/CVE-2017-12985/", }, { category: "self", summary: "SUSE CVE CVE-2017-12986 page", url: "https://www.suse.com/security/cve/CVE-2017-12986/", }, { category: "self", summary: "SUSE CVE CVE-2017-12987 page", url: "https://www.suse.com/security/cve/CVE-2017-12987/", }, { category: "self", summary: "SUSE CVE CVE-2017-12988 page", url: "https://www.suse.com/security/cve/CVE-2017-12988/", }, { category: "self", summary: "SUSE CVE CVE-2017-12989 page", url: "https://www.suse.com/security/cve/CVE-2017-12989/", }, { category: "self", summary: "SUSE CVE CVE-2017-12990 page", url: "https://www.suse.com/security/cve/CVE-2017-12990/", }, { category: "self", summary: "SUSE CVE CVE-2017-12991 page", url: "https://www.suse.com/security/cve/CVE-2017-12991/", }, { category: "self", summary: "SUSE CVE CVE-2017-12992 page", url: "https://www.suse.com/security/cve/CVE-2017-12992/", }, { category: "self", summary: "SUSE CVE CVE-2017-12993 page", url: "https://www.suse.com/security/cve/CVE-2017-12993/", }, { category: "self", summary: "SUSE CVE CVE-2017-12994 page", url: "https://www.suse.com/security/cve/CVE-2017-12994/", }, { category: "self", summary: "SUSE CVE CVE-2017-12995 page", url: "https://www.suse.com/security/cve/CVE-2017-12995/", }, { category: "self", summary: "SUSE CVE CVE-2017-12996 page", url: "https://www.suse.com/security/cve/CVE-2017-12996/", }, { category: "self", summary: "SUSE CVE CVE-2017-12997 page", url: "https://www.suse.com/security/cve/CVE-2017-12997/", }, { category: "self", summary: "SUSE CVE CVE-2017-12998 page", url: "https://www.suse.com/security/cve/CVE-2017-12998/", }, { category: "self", summary: "SUSE CVE CVE-2017-12999 page", url: "https://www.suse.com/security/cve/CVE-2017-12999/", }, { category: "self", summary: "SUSE CVE CVE-2017-13000 page", url: "https://www.suse.com/security/cve/CVE-2017-13000/", }, { category: "self", summary: "SUSE CVE CVE-2017-13001 page", url: "https://www.suse.com/security/cve/CVE-2017-13001/", }, { category: "self", summary: "SUSE CVE CVE-2017-13002 page", url: "https://www.suse.com/security/cve/CVE-2017-13002/", }, { category: "self", summary: "SUSE CVE CVE-2017-13003 page", url: "https://www.suse.com/security/cve/CVE-2017-13003/", }, { category: "self", summary: "SUSE CVE CVE-2017-13004 page", url: "https://www.suse.com/security/cve/CVE-2017-13004/", }, { category: "self", summary: "SUSE CVE CVE-2017-13005 page", url: "https://www.suse.com/security/cve/CVE-2017-13005/", }, { category: "self", summary: "SUSE CVE CVE-2017-13006 page", url: "https://www.suse.com/security/cve/CVE-2017-13006/", }, { category: "self", summary: "SUSE CVE CVE-2017-13007 page", url: "https://www.suse.com/security/cve/CVE-2017-13007/", }, { category: "self", summary: "SUSE CVE CVE-2017-13008 page", url: "https://www.suse.com/security/cve/CVE-2017-13008/", }, { category: "self", summary: "SUSE CVE CVE-2017-13009 page", url: "https://www.suse.com/security/cve/CVE-2017-13009/", }, { category: "self", summary: "SUSE CVE CVE-2017-13010 page", url: "https://www.suse.com/security/cve/CVE-2017-13010/", }, { category: "self", summary: "SUSE CVE CVE-2017-13011 page", url: "https://www.suse.com/security/cve/CVE-2017-13011/", }, { category: "self", summary: "SUSE CVE CVE-2017-13012 page", url: "https://www.suse.com/security/cve/CVE-2017-13012/", }, { category: "self", summary: "SUSE CVE CVE-2017-13013 page", url: "https://www.suse.com/security/cve/CVE-2017-13013/", }, { category: "self", summary: "SUSE CVE CVE-2017-13014 page", url: "https://www.suse.com/security/cve/CVE-2017-13014/", }, { category: "self", summary: "SUSE CVE CVE-2017-13015 page", url: "https://www.suse.com/security/cve/CVE-2017-13015/", }, { category: "self", summary: "SUSE CVE CVE-2017-13016 page", url: "https://www.suse.com/security/cve/CVE-2017-13016/", }, { category: "self", summary: "SUSE CVE CVE-2017-13017 page", url: "https://www.suse.com/security/cve/CVE-2017-13017/", }, { category: "self", summary: "SUSE CVE CVE-2017-13018 page", url: "https://www.suse.com/security/cve/CVE-2017-13018/", }, { category: "self", summary: "SUSE CVE CVE-2017-13019 page", url: "https://www.suse.com/security/cve/CVE-2017-13019/", }, { category: "self", summary: "SUSE CVE CVE-2017-13020 page", url: "https://www.suse.com/security/cve/CVE-2017-13020/", }, { category: "self", summary: "SUSE CVE CVE-2017-13021 page", url: "https://www.suse.com/security/cve/CVE-2017-13021/", }, { category: "self", summary: "SUSE CVE CVE-2017-13022 page", url: "https://www.suse.com/security/cve/CVE-2017-13022/", }, { category: "self", summary: "SUSE CVE CVE-2017-13023 page", url: "https://www.suse.com/security/cve/CVE-2017-13023/", }, { category: "self", summary: "SUSE CVE CVE-2017-13024 page", url: "https://www.suse.com/security/cve/CVE-2017-13024/", }, { category: "self", summary: "SUSE CVE CVE-2017-13025 page", url: "https://www.suse.com/security/cve/CVE-2017-13025/", }, { category: "self", summary: "SUSE CVE CVE-2017-13026 page", url: "https://www.suse.com/security/cve/CVE-2017-13026/", }, { category: "self", summary: "SUSE CVE CVE-2017-13027 page", url: "https://www.suse.com/security/cve/CVE-2017-13027/", }, { category: "self", summary: "SUSE CVE CVE-2017-13028 page", url: "https://www.suse.com/security/cve/CVE-2017-13028/", }, { category: "self", summary: "SUSE CVE CVE-2017-13029 page", url: "https://www.suse.com/security/cve/CVE-2017-13029/", }, { category: "self", summary: "SUSE CVE CVE-2017-13030 page", url: "https://www.suse.com/security/cve/CVE-2017-13030/", }, { category: "self", summary: "SUSE CVE CVE-2017-13031 page", url: "https://www.suse.com/security/cve/CVE-2017-13031/", }, { category: "self", summary: "SUSE CVE CVE-2017-13032 page", url: "https://www.suse.com/security/cve/CVE-2017-13032/", }, { category: "self", summary: "SUSE CVE CVE-2017-13033 page", url: "https://www.suse.com/security/cve/CVE-2017-13033/", }, { category: "self", summary: "SUSE CVE CVE-2017-13034 page", url: "https://www.suse.com/security/cve/CVE-2017-13034/", }, { category: "self", summary: "SUSE CVE CVE-2017-13035 page", url: "https://www.suse.com/security/cve/CVE-2017-13035/", }, { category: "self", summary: "SUSE CVE CVE-2017-13036 page", url: "https://www.suse.com/security/cve/CVE-2017-13036/", }, { category: "self", summary: "SUSE CVE CVE-2017-13037 page", url: "https://www.suse.com/security/cve/CVE-2017-13037/", }, { category: "self", summary: "SUSE CVE CVE-2017-13038 page", url: "https://www.suse.com/security/cve/CVE-2017-13038/", }, { category: "self", summary: "SUSE CVE CVE-2017-13039 page", url: "https://www.suse.com/security/cve/CVE-2017-13039/", }, { category: "self", summary: "SUSE CVE CVE-2017-13040 page", url: "https://www.suse.com/security/cve/CVE-2017-13040/", }, { category: "self", summary: "SUSE CVE CVE-2017-13041 page", url: "https://www.suse.com/security/cve/CVE-2017-13041/", }, { category: "self", summary: "SUSE CVE CVE-2017-13042 page", url: "https://www.suse.com/security/cve/CVE-2017-13042/", }, { category: "self", summary: "SUSE CVE CVE-2017-13043 page", url: "https://www.suse.com/security/cve/CVE-2017-13043/", }, { category: "self", summary: "SUSE CVE CVE-2017-13044 page", url: "https://www.suse.com/security/cve/CVE-2017-13044/", }, { category: "self", summary: "SUSE CVE CVE-2017-13045 page", url: "https://www.suse.com/security/cve/CVE-2017-13045/", }, { category: "self", summary: "SUSE CVE CVE-2017-13046 page", url: "https://www.suse.com/security/cve/CVE-2017-13046/", }, { category: "self", summary: "SUSE CVE CVE-2017-13047 page", url: "https://www.suse.com/security/cve/CVE-2017-13047/", }, { category: "self", summary: "SUSE CVE CVE-2017-13048 page", url: "https://www.suse.com/security/cve/CVE-2017-13048/", }, { category: "self", summary: "SUSE CVE CVE-2017-13049 page", url: "https://www.suse.com/security/cve/CVE-2017-13049/", }, { category: "self", summary: "SUSE CVE CVE-2017-13050 page", url: "https://www.suse.com/security/cve/CVE-2017-13050/", }, { category: "self", summary: "SUSE CVE CVE-2017-13051 page", url: "https://www.suse.com/security/cve/CVE-2017-13051/", }, { category: "self", summary: "SUSE CVE CVE-2017-13052 page", url: "https://www.suse.com/security/cve/CVE-2017-13052/", }, { category: "self", summary: "SUSE CVE CVE-2017-13053 page", url: "https://www.suse.com/security/cve/CVE-2017-13053/", }, { category: "self", summary: "SUSE CVE CVE-2017-13054 page", url: "https://www.suse.com/security/cve/CVE-2017-13054/", }, { category: "self", summary: "SUSE CVE CVE-2017-13055 page", url: "https://www.suse.com/security/cve/CVE-2017-13055/", }, { category: "self", summary: "SUSE CVE CVE-2017-13687 page", url: "https://www.suse.com/security/cve/CVE-2017-13687/", }, { category: "self", summary: "SUSE CVE CVE-2017-13688 page", url: "https://www.suse.com/security/cve/CVE-2017-13688/", }, { category: "self", summary: "SUSE CVE CVE-2017-13689 page", url: "https://www.suse.com/security/cve/CVE-2017-13689/", }, { category: "self", summary: "SUSE CVE CVE-2017-13690 page", url: "https://www.suse.com/security/cve/CVE-2017-13690/", }, { category: "self", summary: "SUSE CVE CVE-2017-13725 page", url: "https://www.suse.com/security/cve/CVE-2017-13725/", }, { category: "self", summary: "SUSE CVE CVE-2017-16808 page", url: "https://www.suse.com/security/cve/CVE-2017-16808/", }, { category: "self", summary: "SUSE CVE CVE-2017-5202 page", url: "https://www.suse.com/security/cve/CVE-2017-5202/", }, { category: "self", summary: "SUSE CVE CVE-2017-5203 page", url: "https://www.suse.com/security/cve/CVE-2017-5203/", }, { category: "self", summary: "SUSE CVE CVE-2017-5204 page", url: "https://www.suse.com/security/cve/CVE-2017-5204/", }, { category: "self", summary: "SUSE CVE CVE-2017-5205 page", url: "https://www.suse.com/security/cve/CVE-2017-5205/", }, { category: "self", summary: "SUSE CVE CVE-2017-5341 page", url: "https://www.suse.com/security/cve/CVE-2017-5341/", }, { category: "self", summary: "SUSE CVE CVE-2017-5342 page", url: "https://www.suse.com/security/cve/CVE-2017-5342/", }, { category: "self", summary: "SUSE CVE CVE-2017-5482 page", url: "https://www.suse.com/security/cve/CVE-2017-5482/", }, { category: "self", summary: "SUSE CVE CVE-2017-5483 page", url: "https://www.suse.com/security/cve/CVE-2017-5483/", }, { category: "self", summary: "SUSE CVE CVE-2017-5484 page", url: "https://www.suse.com/security/cve/CVE-2017-5484/", }, { category: "self", summary: "SUSE CVE CVE-2017-5485 page", url: "https://www.suse.com/security/cve/CVE-2017-5485/", }, { category: "self", summary: "SUSE CVE CVE-2017-5486 page", url: "https://www.suse.com/security/cve/CVE-2017-5486/", }, { category: "self", summary: "SUSE CVE CVE-2018-10103 page", url: "https://www.suse.com/security/cve/CVE-2018-10103/", }, { category: "self", summary: "SUSE CVE CVE-2018-10105 page", url: "https://www.suse.com/security/cve/CVE-2018-10105/", }, { category: "self", summary: "SUSE CVE CVE-2018-14461 page", url: "https://www.suse.com/security/cve/CVE-2018-14461/", }, { category: "self", summary: "SUSE CVE CVE-2018-14462 page", url: "https://www.suse.com/security/cve/CVE-2018-14462/", }, { category: "self", summary: "SUSE CVE CVE-2018-14463 page", url: "https://www.suse.com/security/cve/CVE-2018-14463/", }, { category: "self", summary: "SUSE CVE CVE-2018-14464 page", url: "https://www.suse.com/security/cve/CVE-2018-14464/", }, { category: "self", summary: "SUSE CVE CVE-2018-14465 page", url: "https://www.suse.com/security/cve/CVE-2018-14465/", }, { category: "self", summary: "SUSE CVE CVE-2018-14466 page", url: "https://www.suse.com/security/cve/CVE-2018-14466/", }, { category: "self", summary: "SUSE CVE CVE-2018-14467 page", url: "https://www.suse.com/security/cve/CVE-2018-14467/", }, { category: "self", summary: "SUSE CVE CVE-2018-14468 page", url: "https://www.suse.com/security/cve/CVE-2018-14468/", }, { category: "self", summary: "SUSE CVE CVE-2018-14469 page", url: "https://www.suse.com/security/cve/CVE-2018-14469/", }, { category: "self", summary: "SUSE CVE CVE-2018-14470 page", url: "https://www.suse.com/security/cve/CVE-2018-14470/", }, { category: "self", summary: "SUSE CVE CVE-2018-14879 page", url: "https://www.suse.com/security/cve/CVE-2018-14879/", }, { category: "self", summary: "SUSE CVE CVE-2018-14880 page", url: "https://www.suse.com/security/cve/CVE-2018-14880/", }, { category: "self", summary: "SUSE CVE CVE-2018-14881 page", url: "https://www.suse.com/security/cve/CVE-2018-14881/", }, { category: "self", summary: "SUSE CVE CVE-2018-14882 page", url: "https://www.suse.com/security/cve/CVE-2018-14882/", }, { category: "self", summary: "SUSE CVE CVE-2018-16227 page", url: "https://www.suse.com/security/cve/CVE-2018-16227/", }, { category: "self", summary: "SUSE CVE CVE-2018-16228 page", url: "https://www.suse.com/security/cve/CVE-2018-16228/", }, { category: "self", summary: "SUSE CVE CVE-2018-16229 page", url: "https://www.suse.com/security/cve/CVE-2018-16229/", }, { category: "self", summary: "SUSE CVE CVE-2018-16230 page", url: "https://www.suse.com/security/cve/CVE-2018-16230/", }, { category: "self", summary: "SUSE CVE CVE-2018-16300 page", url: "https://www.suse.com/security/cve/CVE-2018-16300/", }, { category: "self", summary: "SUSE CVE CVE-2018-16301 page", url: "https://www.suse.com/security/cve/CVE-2018-16301/", }, { category: "self", summary: "SUSE CVE CVE-2018-16451 page", url: "https://www.suse.com/security/cve/CVE-2018-16451/", }, { category: "self", summary: "SUSE CVE CVE-2018-16452 page", url: "https://www.suse.com/security/cve/CVE-2018-16452/", }, { category: "self", summary: "SUSE CVE CVE-2018-19519 page", url: "https://www.suse.com/security/cve/CVE-2018-19519/", }, { category: "self", summary: "SUSE CVE CVE-2019-1010220 page", url: "https://www.suse.com/security/cve/CVE-2019-1010220/", }, { category: "self", summary: "SUSE CVE CVE-2019-15166 page", url: "https://www.suse.com/security/cve/CVE-2019-15166/", }, { category: "self", summary: "SUSE CVE CVE-2019-15167 page", url: "https://www.suse.com/security/cve/CVE-2019-15167/", }, { category: "self", summary: "SUSE CVE CVE-2020-8037 page", url: "https://www.suse.com/security/cve/CVE-2020-8037/", }, ], title: "tcpdump-4.99.1-1.2 on GA media", tracking: { current_release_date: "2024-06-15T00:00:00Z", generator: { date: "2024-06-15T00:00:00Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2024:11425-1", initial_release_date: "2024-06-15T00:00:00Z", revision_history: [ { date: "2024-06-15T00:00:00Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "tcpdump-4.99.1-1.2.aarch64", product: { name: "tcpdump-4.99.1-1.2.aarch64", product_id: "tcpdump-4.99.1-1.2.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "tcpdump-4.99.1-1.2.ppc64le", product: { name: "tcpdump-4.99.1-1.2.ppc64le", product_id: "tcpdump-4.99.1-1.2.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "tcpdump-4.99.1-1.2.s390x", product: { name: "tcpdump-4.99.1-1.2.s390x", product_id: "tcpdump-4.99.1-1.2.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "tcpdump-4.99.1-1.2.x86_64", product: { name: "tcpdump-4.99.1-1.2.x86_64", product_id: "tcpdump-4.99.1-1.2.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "openSUSE Tumbleweed", product: { name: "openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed", product_identification_helper: { cpe: "cpe:/o:opensuse:tumbleweed", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tcpdump-4.99.1-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", }, product_reference: "tcpdump-4.99.1-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.99.1-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", }, product_reference: "tcpdump-4.99.1-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.99.1-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", }, product_reference: "tcpdump-4.99.1-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.99.1-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", }, product_reference: "tcpdump-4.99.1-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, ], }, vulnerabilities: [ { cve: "CVE-2016-7922", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7922", }, ], notes: [ { category: "general", text: "The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7922", url: "https://www.suse.com/security/cve/CVE-2016-7922", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7922", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7922", }, { cve: "CVE-2016-7923", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7923", }, ], notes: [ { category: "general", text: "The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7923", url: "https://www.suse.com/security/cve/CVE-2016-7923", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7923", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7923", }, { cve: "CVE-2016-7924", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7924", }, ], notes: [ { category: "general", text: "The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7924", url: "https://www.suse.com/security/cve/CVE-2016-7924", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7924", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7924", }, { cve: "CVE-2016-7925", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7925", }, ], notes: [ { category: "general", text: "The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7925", url: "https://www.suse.com/security/cve/CVE-2016-7925", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7925", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7925", }, { cve: "CVE-2016-7926", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7926", }, ], notes: [ { category: "general", text: "The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7926", url: "https://www.suse.com/security/cve/CVE-2016-7926", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7926", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7926", }, { cve: "CVE-2016-7927", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7927", }, ], notes: [ { category: "general", text: "The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7927", url: "https://www.suse.com/security/cve/CVE-2016-7927", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7927", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7927", }, { cve: "CVE-2016-7928", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7928", }, ], notes: [ { category: "general", text: "The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7928", url: "https://www.suse.com/security/cve/CVE-2016-7928", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7928", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7928", }, { cve: "CVE-2016-7929", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7929", }, ], notes: [ { category: "general", text: "The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7929", url: "https://www.suse.com/security/cve/CVE-2016-7929", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7929", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7929", }, { cve: "CVE-2016-7930", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7930", }, ], notes: [ { category: "general", text: "The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7930", url: "https://www.suse.com/security/cve/CVE-2016-7930", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7930", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7930", }, { cve: "CVE-2016-7931", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7931", }, ], notes: [ { category: "general", text: "The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7931", url: "https://www.suse.com/security/cve/CVE-2016-7931", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7931", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7931", }, { cve: "CVE-2016-7932", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7932", }, ], notes: [ { category: "general", text: "The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7932", url: "https://www.suse.com/security/cve/CVE-2016-7932", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7932", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7932", }, { cve: "CVE-2016-7933", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7933", }, ], notes: [ { category: "general", text: "The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7933", url: "https://www.suse.com/security/cve/CVE-2016-7933", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7933", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7933", }, { cve: "CVE-2016-7934", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7934", }, ], notes: [ { category: "general", text: "The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7934", url: "https://www.suse.com/security/cve/CVE-2016-7934", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7934", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7934", }, { cve: "CVE-2016-7935", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7935", }, ], notes: [ { category: "general", text: "The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7935", url: "https://www.suse.com/security/cve/CVE-2016-7935", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7935", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7935", }, { cve: "CVE-2016-7936", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7936", }, ], notes: [ { category: "general", text: "The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7936", url: "https://www.suse.com/security/cve/CVE-2016-7936", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7936", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7936", }, { cve: "CVE-2016-7937", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7937", }, ], notes: [ { category: "general", text: "The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7937", url: "https://www.suse.com/security/cve/CVE-2016-7937", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7937", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7937", }, { cve: "CVE-2016-7938", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7938", }, ], notes: [ { category: "general", text: "The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7938", url: "https://www.suse.com/security/cve/CVE-2016-7938", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7938", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7938", }, { cve: "CVE-2016-7939", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7939", }, ], notes: [ { category: "general", text: "The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7939", url: "https://www.suse.com/security/cve/CVE-2016-7939", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7939", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7939", }, { cve: "CVE-2016-7940", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7940", }, ], notes: [ { category: "general", text: "The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7940", url: "https://www.suse.com/security/cve/CVE-2016-7940", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7940", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7940", }, { cve: "CVE-2016-7973", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7973", }, ], notes: [ { category: "general", text: "The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7973", url: "https://www.suse.com/security/cve/CVE-2016-7973", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7973", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7973", }, { cve: "CVE-2016-7974", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7974", }, ], notes: [ { category: "general", text: "The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7974", url: "https://www.suse.com/security/cve/CVE-2016-7974", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7974", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7974", }, { cve: "CVE-2016-7975", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7975", }, ], notes: [ { category: "general", text: "The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7975", url: "https://www.suse.com/security/cve/CVE-2016-7975", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7975", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7975", }, { cve: "CVE-2016-7983", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7983", }, ], notes: [ { category: "general", text: "The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7983", url: "https://www.suse.com/security/cve/CVE-2016-7983", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7983", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7983", }, { cve: "CVE-2016-7984", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7984", }, ], notes: [ { category: "general", text: "The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7984", url: "https://www.suse.com/security/cve/CVE-2016-7984", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7984", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7984", }, { cve: "CVE-2016-7985", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7985", }, ], notes: [ { category: "general", text: "The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7985", url: "https://www.suse.com/security/cve/CVE-2016-7985", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7985", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7985", }, { cve: "CVE-2016-7986", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7986", }, ], notes: [ { category: "general", text: "The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7986", url: "https://www.suse.com/security/cve/CVE-2016-7986", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7986", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7986", }, { cve: "CVE-2016-7992", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7992", }, ], notes: [ { category: "general", text: "The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7992", url: "https://www.suse.com/security/cve/CVE-2016-7992", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7992", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7992", }, { cve: "CVE-2016-7993", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7993", }, ], notes: [ { category: "general", text: "A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM).", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7993", url: "https://www.suse.com/security/cve/CVE-2016-7993", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7993", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7993", }, { cve: "CVE-2016-8574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-8574", }, ], notes: [ { category: "general", text: "The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-8574", url: "https://www.suse.com/security/cve/CVE-2016-8574", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-8574", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-8574", }, { cve: "CVE-2016-8575", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-8575", }, ], notes: [ { category: "general", text: "The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-8575", url: "https://www.suse.com/security/cve/CVE-2016-8575", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-8575", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-8575", }, { cve: "CVE-2017-11108", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-11108", }, ], notes: [ { category: "general", text: "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-11108", url: "https://www.suse.com/security/cve/CVE-2017-11108", }, { category: "external", summary: "SUSE Bug 1047873 for CVE-2017-11108", url: "https://bugzilla.suse.com/1047873", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-11108", url: "https://bugzilla.suse.com/1057247", }, { category: "external", summary: "SUSE Bug 1123142 for CVE-2017-11108", url: "https://bugzilla.suse.com/1123142", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-11108", }, { cve: "CVE-2017-11541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-11541", }, ], notes: [ { category: "general", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-11541", url: "https://www.suse.com/security/cve/CVE-2017-11541", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-11541", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-11541", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-11541", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-11541", url: "https://bugzilla.suse.com/1057247", }, { category: "external", summary: "SUSE Bug 1123142 for CVE-2017-11541", url: "https://bugzilla.suse.com/1123142", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-11541", }, { cve: "CVE-2017-11542", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-11542", }, ], notes: [ { category: "general", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-11542", url: "https://www.suse.com/security/cve/CVE-2017-11542", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-11542", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-11542", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-11542", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-11542", url: "https://bugzilla.suse.com/1057247", }, { category: "external", summary: "SUSE Bug 1123142 for CVE-2017-11542", url: "https://bugzilla.suse.com/1123142", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-11542", }, { cve: "CVE-2017-11543", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-11543", }, ], notes: [ { category: "general", text: "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-11543", url: "https://www.suse.com/security/cve/CVE-2017-11543", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-11543", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-11543", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-11543", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-11543", url: "https://bugzilla.suse.com/1057247", }, { category: "external", summary: "SUSE Bug 1123142 for CVE-2017-11543", url: "https://bugzilla.suse.com/1123142", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-11543", }, { cve: "CVE-2017-12893", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12893", }, ], notes: [ { category: "general", text: "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12893", url: "https://www.suse.com/security/cve/CVE-2017-12893", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12893", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12893", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12893", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12893", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12893", }, { cve: "CVE-2017-12894", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12894", }, ], notes: [ { category: "general", text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12894", url: "https://www.suse.com/security/cve/CVE-2017-12894", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12894", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12894", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12894", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12894", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12894", }, { cve: "CVE-2017-12895", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12895", }, ], notes: [ { category: "general", text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12895", url: "https://www.suse.com/security/cve/CVE-2017-12895", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12895", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12895", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12895", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12895", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12895", }, { cve: "CVE-2017-12896", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12896", }, ], notes: [ { category: "general", text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12896", url: "https://www.suse.com/security/cve/CVE-2017-12896", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12896", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12896", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12896", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12896", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12896", }, { cve: "CVE-2017-12897", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12897", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12897", url: "https://www.suse.com/security/cve/CVE-2017-12897", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12897", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12897", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12897", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12897", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12897", }, { cve: "CVE-2017-12898", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12898", }, ], notes: [ { category: "general", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12898", url: "https://www.suse.com/security/cve/CVE-2017-12898", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12898", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12898", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12898", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12898", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12898", }, { cve: "CVE-2017-12899", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12899", }, ], notes: [ { category: "general", text: "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12899", url: "https://www.suse.com/security/cve/CVE-2017-12899", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12899", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12899", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12899", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12899", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12899", }, { cve: "CVE-2017-12900", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12900", }, ], notes: [ { category: "general", text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12900", url: "https://www.suse.com/security/cve/CVE-2017-12900", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12900", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12900", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12900", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12900", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12900", }, { cve: "CVE-2017-12901", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12901", }, ], notes: [ { category: "general", text: "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12901", url: "https://www.suse.com/security/cve/CVE-2017-12901", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12901", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12901", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12901", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12901", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12901", }, { cve: "CVE-2017-12902", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12902", }, ], notes: [ { category: "general", text: "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12902", url: "https://www.suse.com/security/cve/CVE-2017-12902", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12902", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12902", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12902", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12902", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12902", }, { cve: "CVE-2017-12985", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12985", }, ], notes: [ { category: "general", text: "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12985", url: "https://www.suse.com/security/cve/CVE-2017-12985", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12985", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12985", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12985", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12985", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12985", }, { cve: "CVE-2017-12986", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12986", }, ], notes: [ { category: "general", text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12986", url: "https://www.suse.com/security/cve/CVE-2017-12986", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12986", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12986", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12986", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12986", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12986", }, { cve: "CVE-2017-12987", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12987", }, ], notes: [ { category: "general", text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12987", url: "https://www.suse.com/security/cve/CVE-2017-12987", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12987", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12987", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12987", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12987", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12987", }, { cve: "CVE-2017-12988", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12988", }, ], notes: [ { category: "general", text: "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12988", url: "https://www.suse.com/security/cve/CVE-2017-12988", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12988", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12988", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12988", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12988", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12988", }, { cve: "CVE-2017-12989", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12989", }, ], notes: [ { category: "general", text: "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12989", url: "https://www.suse.com/security/cve/CVE-2017-12989", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12989", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12989", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12989", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12989", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12989", }, { cve: "CVE-2017-12990", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12990", }, ], notes: [ { category: "general", text: "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12990", url: "https://www.suse.com/security/cve/CVE-2017-12990", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12990", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12990", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12990", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12990", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12990", }, { cve: "CVE-2017-12991", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12991", }, ], notes: [ { category: "general", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12991", url: "https://www.suse.com/security/cve/CVE-2017-12991", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12991", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12991", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12991", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12991", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12991", }, { cve: "CVE-2017-12992", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12992", }, ], notes: [ { category: "general", text: "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12992", url: "https://www.suse.com/security/cve/CVE-2017-12992", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12992", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12992", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12992", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12992", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12992", }, { cve: "CVE-2017-12993", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12993", }, ], notes: [ { category: "general", text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12993", url: "https://www.suse.com/security/cve/CVE-2017-12993", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12993", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12993", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12993", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12993", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12993", }, { cve: "CVE-2017-12994", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12994", }, ], notes: [ { category: "general", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12994", url: "https://www.suse.com/security/cve/CVE-2017-12994", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12994", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12994", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12994", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12994", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12994", }, { cve: "CVE-2017-12995", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12995", }, ], notes: [ { category: "general", text: "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12995", url: "https://www.suse.com/security/cve/CVE-2017-12995", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12995", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12995", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12995", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12995", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12995", }, { cve: "CVE-2017-12996", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12996", }, ], notes: [ { category: "general", text: "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12996", url: "https://www.suse.com/security/cve/CVE-2017-12996", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12996", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12996", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12996", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12996", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12996", }, { cve: "CVE-2017-12997", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12997", }, ], notes: [ { category: "general", text: "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12997", url: "https://www.suse.com/security/cve/CVE-2017-12997", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12997", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12997", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12997", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12997", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12997", }, { cve: "CVE-2017-12998", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12998", }, ], notes: [ { category: "general", text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12998", url: "https://www.suse.com/security/cve/CVE-2017-12998", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12998", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12998", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12998", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12998", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12998", }, { cve: "CVE-2017-12999", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12999", }, ], notes: [ { category: "general", text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12999", url: "https://www.suse.com/security/cve/CVE-2017-12999", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-12999", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-12999", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-12999", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-12999", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-12999", }, { cve: "CVE-2017-13000", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13000", }, ], notes: [ { category: "general", text: "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13000", url: "https://www.suse.com/security/cve/CVE-2017-13000", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13000", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13000", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13000", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13000", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13000", }, { cve: "CVE-2017-13001", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13001", }, ], notes: [ { category: "general", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13001", url: "https://www.suse.com/security/cve/CVE-2017-13001", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13001", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13001", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13001", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13001", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13001", }, { cve: "CVE-2017-13002", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13002", }, ], notes: [ { category: "general", text: "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13002", url: "https://www.suse.com/security/cve/CVE-2017-13002", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13002", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13002", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13002", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13002", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13002", }, { cve: "CVE-2017-13003", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13003", }, ], notes: [ { category: "general", text: "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13003", url: "https://www.suse.com/security/cve/CVE-2017-13003", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13003", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13003", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13003", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13003", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13003", }, { cve: "CVE-2017-13004", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13004", }, ], notes: [ { category: "general", text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13004", url: "https://www.suse.com/security/cve/CVE-2017-13004", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13004", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13004", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13004", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13004", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13004", }, { cve: "CVE-2017-13005", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13005", }, ], notes: [ { category: "general", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13005", url: "https://www.suse.com/security/cve/CVE-2017-13005", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13005", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13005", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13005", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13005", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13005", }, { cve: "CVE-2017-13006", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13006", }, ], notes: [ { category: "general", text: "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13006", url: "https://www.suse.com/security/cve/CVE-2017-13006", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13006", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13006", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13006", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13006", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13006", }, { cve: "CVE-2017-13007", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13007", }, ], notes: [ { category: "general", text: "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13007", url: "https://www.suse.com/security/cve/CVE-2017-13007", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13007", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13007", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13007", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13007", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13007", }, { cve: "CVE-2017-13008", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13008", }, ], notes: [ { category: "general", text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13008", url: "https://www.suse.com/security/cve/CVE-2017-13008", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13008", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13008", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13008", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13008", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13008", }, { cve: "CVE-2017-13009", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13009", }, ], notes: [ { category: "general", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13009", url: "https://www.suse.com/security/cve/CVE-2017-13009", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13009", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13009", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13009", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13009", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13009", }, { cve: "CVE-2017-13010", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13010", }, ], notes: [ { category: "general", text: "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13010", url: "https://www.suse.com/security/cve/CVE-2017-13010", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13010", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13010", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13010", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13010", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13010", }, { cve: "CVE-2017-13011", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13011", }, ], notes: [ { category: "general", text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13011", url: "https://www.suse.com/security/cve/CVE-2017-13011", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13011", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13011", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13011", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13011", url: "https://bugzilla.suse.com/1057247", }, { category: "external", summary: "SUSE Bug 1123142 for CVE-2017-13011", url: "https://bugzilla.suse.com/1123142", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13011", }, { cve: "CVE-2017-13012", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13012", }, ], notes: [ { category: "general", text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13012", url: "https://www.suse.com/security/cve/CVE-2017-13012", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13012", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13012", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13012", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13012", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13012", }, { cve: "CVE-2017-13013", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13013", }, ], notes: [ { category: "general", text: "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13013", url: "https://www.suse.com/security/cve/CVE-2017-13013", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13013", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13013", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13013", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13013", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13013", }, { cve: "CVE-2017-13014", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13014", }, ], notes: [ { category: "general", text: "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13014", url: "https://www.suse.com/security/cve/CVE-2017-13014", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13014", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13014", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13014", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13014", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13014", }, { cve: "CVE-2017-13015", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13015", }, ], notes: [ { category: "general", text: "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13015", url: "https://www.suse.com/security/cve/CVE-2017-13015", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13015", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13015", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13015", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13015", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13015", }, { cve: "CVE-2017-13016", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13016", }, ], notes: [ { category: "general", text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13016", url: "https://www.suse.com/security/cve/CVE-2017-13016", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13016", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13016", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13016", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13016", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13016", }, { cve: "CVE-2017-13017", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13017", }, ], notes: [ { category: "general", text: "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13017", url: "https://www.suse.com/security/cve/CVE-2017-13017", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13017", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13017", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13017", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13017", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13017", }, { cve: "CVE-2017-13018", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13018", }, ], notes: [ { category: "general", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13018", url: "https://www.suse.com/security/cve/CVE-2017-13018", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13018", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13018", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13018", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13018", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13018", }, { cve: "CVE-2017-13019", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13019", }, ], notes: [ { category: "general", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13019", url: "https://www.suse.com/security/cve/CVE-2017-13019", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13019", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13019", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13019", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13019", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13019", }, { cve: "CVE-2017-13020", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13020", }, ], notes: [ { category: "general", text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13020", url: "https://www.suse.com/security/cve/CVE-2017-13020", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13020", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13020", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13020", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13020", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13020", }, { cve: "CVE-2017-13021", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13021", }, ], notes: [ { category: "general", text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13021", url: "https://www.suse.com/security/cve/CVE-2017-13021", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13021", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13021", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13021", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13021", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13021", }, { cve: "CVE-2017-13022", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13022", }, ], notes: [ { category: "general", text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13022", url: "https://www.suse.com/security/cve/CVE-2017-13022", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13022", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13022", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13022", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13022", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13022", }, { cve: "CVE-2017-13023", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13023", }, ], notes: [ { category: "general", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13023", url: "https://www.suse.com/security/cve/CVE-2017-13023", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13023", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13023", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13023", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13023", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13023", }, { cve: "CVE-2017-13024", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13024", }, ], notes: [ { category: "general", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13024", url: "https://www.suse.com/security/cve/CVE-2017-13024", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13024", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13024", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13024", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13024", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13024", }, { cve: "CVE-2017-13025", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13025", }, ], notes: [ { category: "general", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13025", url: "https://www.suse.com/security/cve/CVE-2017-13025", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13025", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13025", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13025", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13025", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13025", }, { cve: "CVE-2017-13026", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13026", }, ], notes: [ { category: "general", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13026", url: "https://www.suse.com/security/cve/CVE-2017-13026", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13026", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13026", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13026", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13026", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13026", }, { cve: "CVE-2017-13027", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13027", }, ], notes: [ { category: "general", text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13027", url: "https://www.suse.com/security/cve/CVE-2017-13027", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13027", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13027", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13027", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13027", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13027", }, { cve: "CVE-2017-13028", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13028", }, ], notes: [ { category: "general", text: "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13028", url: "https://www.suse.com/security/cve/CVE-2017-13028", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13028", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13028", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13028", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13028", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13028", }, { cve: "CVE-2017-13029", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13029", }, ], notes: [ { category: "general", text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13029", url: "https://www.suse.com/security/cve/CVE-2017-13029", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13029", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13029", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13029", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13029", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13029", }, { cve: "CVE-2017-13030", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13030", }, ], notes: [ { category: "general", text: "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13030", url: "https://www.suse.com/security/cve/CVE-2017-13030", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13030", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13030", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13030", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13030", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13030", }, { cve: "CVE-2017-13031", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13031", }, ], notes: [ { category: "general", text: "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13031", url: "https://www.suse.com/security/cve/CVE-2017-13031", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13031", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13031", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13031", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13031", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13031", }, { cve: "CVE-2017-13032", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13032", }, ], notes: [ { category: "general", text: "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13032", url: "https://www.suse.com/security/cve/CVE-2017-13032", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13032", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13032", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13032", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13032", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13032", }, { cve: "CVE-2017-13033", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13033", }, ], notes: [ { category: "general", text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13033", url: "https://www.suse.com/security/cve/CVE-2017-13033", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13033", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13033", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13033", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13033", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13033", }, { cve: "CVE-2017-13034", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13034", }, ], notes: [ { category: "general", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13034", url: "https://www.suse.com/security/cve/CVE-2017-13034", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13034", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13034", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13034", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13034", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13034", }, { cve: "CVE-2017-13035", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13035", }, ], notes: [ { category: "general", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13035", url: "https://www.suse.com/security/cve/CVE-2017-13035", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13035", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13035", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13035", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13035", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13035", }, { cve: "CVE-2017-13036", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13036", }, ], notes: [ { category: "general", text: "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13036", url: "https://www.suse.com/security/cve/CVE-2017-13036", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13036", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13036", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13036", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13036", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13036", }, { cve: "CVE-2017-13037", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13037", }, ], notes: [ { category: "general", text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13037", url: "https://www.suse.com/security/cve/CVE-2017-13037", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13037", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13037", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13037", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13037", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13037", }, { cve: "CVE-2017-13038", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13038", }, ], notes: [ { category: "general", text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13038", url: "https://www.suse.com/security/cve/CVE-2017-13038", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13038", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13038", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13038", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13038", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13038", }, { cve: "CVE-2017-13039", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13039", }, ], notes: [ { category: "general", text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13039", url: "https://www.suse.com/security/cve/CVE-2017-13039", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13039", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13039", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13039", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13039", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13039", }, { cve: "CVE-2017-13040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13040", }, ], notes: [ { category: "general", text: "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13040", url: "https://www.suse.com/security/cve/CVE-2017-13040", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13040", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13040", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13040", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13040", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13040", }, { cve: "CVE-2017-13041", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13041", }, ], notes: [ { category: "general", text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13041", url: "https://www.suse.com/security/cve/CVE-2017-13041", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13041", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13041", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13041", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13041", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13041", }, { cve: "CVE-2017-13042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13042", }, ], notes: [ { category: "general", text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13042", url: "https://www.suse.com/security/cve/CVE-2017-13042", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13042", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13042", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13042", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13042", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13042", }, { cve: "CVE-2017-13043", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13043", }, ], notes: [ { category: "general", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13043", url: "https://www.suse.com/security/cve/CVE-2017-13043", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13043", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13043", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13043", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13043", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13043", }, { cve: "CVE-2017-13044", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13044", }, ], notes: [ { category: "general", text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13044", url: "https://www.suse.com/security/cve/CVE-2017-13044", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13044", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13044", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13044", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13044", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13044", }, { cve: "CVE-2017-13045", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13045", }, ], notes: [ { category: "general", text: "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13045", url: "https://www.suse.com/security/cve/CVE-2017-13045", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13045", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13045", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13045", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13045", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13045", }, { cve: "CVE-2017-13046", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13046", }, ], notes: [ { category: "general", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13046", url: "https://www.suse.com/security/cve/CVE-2017-13046", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13046", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13046", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13046", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13046", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13046", }, { cve: "CVE-2017-13047", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13047", }, ], notes: [ { category: "general", text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13047", url: "https://www.suse.com/security/cve/CVE-2017-13047", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13047", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13047", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13047", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13047", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13047", }, { cve: "CVE-2017-13048", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13048", }, ], notes: [ { category: "general", text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13048", url: "https://www.suse.com/security/cve/CVE-2017-13048", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13048", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13048", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13048", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13048", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13048", }, { cve: "CVE-2017-13049", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13049", }, ], notes: [ { category: "general", text: "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13049", url: "https://www.suse.com/security/cve/CVE-2017-13049", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13049", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13049", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13049", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13049", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13049", }, { cve: "CVE-2017-13050", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13050", }, ], notes: [ { category: "general", text: "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13050", url: "https://www.suse.com/security/cve/CVE-2017-13050", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13050", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13050", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13050", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13050", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13050", }, { cve: "CVE-2017-13051", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13051", }, ], notes: [ { category: "general", text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13051", url: "https://www.suse.com/security/cve/CVE-2017-13051", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13051", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13051", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13051", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13051", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13051", }, { cve: "CVE-2017-13052", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13052", }, ], notes: [ { category: "general", text: "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13052", url: "https://www.suse.com/security/cve/CVE-2017-13052", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13052", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13052", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13052", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13052", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13052", }, { cve: "CVE-2017-13053", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13053", }, ], notes: [ { category: "general", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13053", url: "https://www.suse.com/security/cve/CVE-2017-13053", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13053", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13053", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13053", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13053", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13053", }, { cve: "CVE-2017-13054", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13054", }, ], notes: [ { category: "general", text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13054", url: "https://www.suse.com/security/cve/CVE-2017-13054", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13054", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13054", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13054", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13054", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13054", }, { cve: "CVE-2017-13055", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13055", }, ], notes: [ { category: "general", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13055", url: "https://www.suse.com/security/cve/CVE-2017-13055", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13055", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13055", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13055", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13055", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13055", }, { cve: "CVE-2017-13687", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13687", }, ], notes: [ { category: "general", text: "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13687", url: "https://www.suse.com/security/cve/CVE-2017-13687", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13687", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13687", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13687", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13687", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13687", }, { cve: "CVE-2017-13688", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13688", }, ], notes: [ { category: "general", text: "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13688", url: "https://www.suse.com/security/cve/CVE-2017-13688", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13688", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13688", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13688", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13688", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13688", }, { cve: "CVE-2017-13689", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13689", }, ], notes: [ { category: "general", text: "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13689", url: "https://www.suse.com/security/cve/CVE-2017-13689", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13689", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13689", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13689", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13689", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13689", }, { cve: "CVE-2017-13690", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13690", }, ], notes: [ { category: "general", text: "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13690", url: "https://www.suse.com/security/cve/CVE-2017-13690", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13690", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13690", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13690", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13690", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13690", }, { cve: "CVE-2017-13725", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-13725", }, ], notes: [ { category: "general", text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-13725", url: "https://www.suse.com/security/cve/CVE-2017-13725", }, { category: "external", summary: "SUSE Bug 1050219 for CVE-2017-13725", url: "https://bugzilla.suse.com/1050219", }, { category: "external", summary: "SUSE Bug 1050222 for CVE-2017-13725", url: "https://bugzilla.suse.com/1050222", }, { category: "external", summary: "SUSE Bug 1050225 for CVE-2017-13725", url: "https://bugzilla.suse.com/1050225", }, { category: "external", summary: "SUSE Bug 1057247 for CVE-2017-13725", url: "https://bugzilla.suse.com/1057247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2017-13725", }, { cve: "CVE-2017-16808", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-16808", }, ], notes: [ { category: "general", text: "tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-16808", url: "https://www.suse.com/security/cve/CVE-2017-16808", }, { category: "external", summary: "SUSE Bug 1068716 for CVE-2017-16808", url: "https://bugzilla.suse.com/1068716", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2017-16808", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-16808", }, { cve: "CVE-2017-5202", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5202", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5202", url: "https://www.suse.com/security/cve/CVE-2017-5202", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5202", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5202", }, { cve: "CVE-2017-5203", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5203", }, ], notes: [ { category: "general", text: "The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5203", url: "https://www.suse.com/security/cve/CVE-2017-5203", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5203", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5203", }, { cve: "CVE-2017-5204", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5204", }, ], notes: [ { category: "general", text: "The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5204", url: "https://www.suse.com/security/cve/CVE-2017-5204", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5204", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5204", }, { cve: "CVE-2017-5205", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5205", }, ], notes: [ { category: "general", text: "The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5205", url: "https://www.suse.com/security/cve/CVE-2017-5205", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5205", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5205", }, { cve: "CVE-2017-5341", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5341", }, ], notes: [ { category: "general", text: "The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5341", url: "https://www.suse.com/security/cve/CVE-2017-5341", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5341", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5341", }, { cve: "CVE-2017-5342", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5342", }, ], notes: [ { category: "general", text: "In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5342", url: "https://www.suse.com/security/cve/CVE-2017-5342", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5342", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5342", }, { cve: "CVE-2017-5482", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5482", }, ], notes: [ { category: "general", text: "The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5482", url: "https://www.suse.com/security/cve/CVE-2017-5482", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5482", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5482", }, { cve: "CVE-2017-5483", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5483", }, ], notes: [ { category: "general", text: "The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5483", url: "https://www.suse.com/security/cve/CVE-2017-5483", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5483", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5483", }, { cve: "CVE-2017-5484", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5484", }, ], notes: [ { category: "general", text: "The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5484", url: "https://www.suse.com/security/cve/CVE-2017-5484", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5484", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5484", }, { cve: "CVE-2017-5485", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5485", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5485", url: "https://www.suse.com/security/cve/CVE-2017-5485", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5485", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5485", }, { cve: "CVE-2017-5486", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5486", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5486", url: "https://www.suse.com/security/cve/CVE-2017-5486", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5486", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-5486", }, { cve: "CVE-2018-10103", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-10103", }, ], notes: [ { category: "general", text: "tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-10103", url: "https://www.suse.com/security/cve/CVE-2018-10103", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-10103", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-10103", }, { cve: "CVE-2018-10105", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-10105", }, ], notes: [ { category: "general", text: "tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-10105", url: "https://www.suse.com/security/cve/CVE-2018-10105", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-10105", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-10105", }, { cve: "CVE-2018-14461", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14461", }, ], notes: [ { category: "general", text: "The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14461", url: "https://www.suse.com/security/cve/CVE-2018-14461", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14461", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14461", }, { cve: "CVE-2018-14462", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14462", }, ], notes: [ { category: "general", text: "The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14462", url: "https://www.suse.com/security/cve/CVE-2018-14462", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14462", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14462", }, { cve: "CVE-2018-14463", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14463", }, ], notes: [ { category: "general", text: "The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14463", url: "https://www.suse.com/security/cve/CVE-2018-14463", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14463", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14463", }, { cve: "CVE-2018-14464", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14464", }, ], notes: [ { category: "general", text: "The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14464", url: "https://www.suse.com/security/cve/CVE-2018-14464", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14464", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14464", }, { cve: "CVE-2018-14465", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14465", }, ], notes: [ { category: "general", text: "The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14465", url: "https://www.suse.com/security/cve/CVE-2018-14465", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14465", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14465", }, { cve: "CVE-2018-14466", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14466", }, ], notes: [ { category: "general", text: "The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14466", url: "https://www.suse.com/security/cve/CVE-2018-14466", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14466", url: "https://bugzilla.suse.com/1153098", }, { category: "external", summary: "SUSE Bug 1166972 for CVE-2018-14466", url: "https://bugzilla.suse.com/1166972", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14466", }, { cve: "CVE-2018-14467", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14467", }, ], notes: [ { category: "general", text: "The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14467", url: "https://www.suse.com/security/cve/CVE-2018-14467", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14467", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14467", }, { cve: "CVE-2018-14468", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14468", }, ], notes: [ { category: "general", text: "The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14468", url: "https://www.suse.com/security/cve/CVE-2018-14468", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14468", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14468", }, { cve: "CVE-2018-14469", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14469", }, ], notes: [ { category: "general", text: "The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14469", url: "https://www.suse.com/security/cve/CVE-2018-14469", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14469", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14469", }, { cve: "CVE-2018-14470", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14470", }, ], notes: [ { category: "general", text: "The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14470", url: "https://www.suse.com/security/cve/CVE-2018-14470", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14470", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14470", }, { cve: "CVE-2018-14879", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14879", }, ], notes: [ { category: "general", text: "The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14879", url: "https://www.suse.com/security/cve/CVE-2018-14879", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14879", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 0, baseSeverity: "NONE", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2018-14879", }, { cve: "CVE-2018-14880", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14880", }, ], notes: [ { category: "general", text: "The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14880", url: "https://www.suse.com/security/cve/CVE-2018-14880", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14880", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14880", }, { cve: "CVE-2018-14881", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14881", }, ], notes: [ { category: "general", text: "The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14881", url: "https://www.suse.com/security/cve/CVE-2018-14881", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14881", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14881", }, { cve: "CVE-2018-14882", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-14882", }, ], notes: [ { category: "general", text: "The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-14882", url: "https://www.suse.com/security/cve/CVE-2018-14882", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-14882", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-14882", }, { cve: "CVE-2018-16227", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-16227", }, ], notes: [ { category: "general", text: "The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-16227", url: "https://www.suse.com/security/cve/CVE-2018-16227", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-16227", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-16227", }, { cve: "CVE-2018-16228", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-16228", }, ], notes: [ { category: "general", text: "The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-16228", url: "https://www.suse.com/security/cve/CVE-2018-16228", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-16228", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-16228", }, { cve: "CVE-2018-16229", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-16229", }, ], notes: [ { category: "general", text: "The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-16229", url: "https://www.suse.com/security/cve/CVE-2018-16229", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-16229", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-16229", }, { cve: "CVE-2018-16230", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-16230", }, ], notes: [ { category: "general", text: "The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-16230", url: "https://www.suse.com/security/cve/CVE-2018-16230", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-16230", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-16230", }, { cve: "CVE-2018-16300", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-16300", }, ], notes: [ { category: "general", text: "The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-16300", url: "https://www.suse.com/security/cve/CVE-2018-16300", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-16300", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-16300", }, { cve: "CVE-2018-16301", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-16301", }, ], notes: [ { category: "general", text: "The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-16301", url: "https://www.suse.com/security/cve/CVE-2018-16301", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-16301", url: "https://bugzilla.suse.com/1153098", }, { category: "external", summary: "SUSE Bug 1153332 for CVE-2018-16301", url: "https://bugzilla.suse.com/1153332", }, { category: "external", summary: "SUSE Bug 1195825 for CVE-2018-16301", url: "https://bugzilla.suse.com/1195825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-16301", }, { cve: "CVE-2018-16451", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-16451", }, ], notes: [ { category: "general", text: "The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-16451", url: "https://www.suse.com/security/cve/CVE-2018-16451", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-16451", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-16451", }, { cve: "CVE-2018-16452", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-16452", }, ], notes: [ { category: "general", text: "The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-16452", url: "https://www.suse.com/security/cve/CVE-2018-16452", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2018-16452", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-16452", }, { cve: "CVE-2018-19519", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-19519", }, ], notes: [ { category: "general", text: "In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-19519", url: "https://www.suse.com/security/cve/CVE-2018-19519", }, { category: "external", summary: "SUSE Bug 1117267 for CVE-2018-19519", url: "https://bugzilla.suse.com/1117267", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-19519", }, { cve: "CVE-2019-1010220", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-1010220", }, ], notes: [ { category: "general", text: "tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: \"ND_PRINT((ndo, \"%s\", buf));\", in function named \"print_prefix\", in \"print-hncp.c\". The attack vector is: The victim must open a specially crafted pcap file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-1010220", url: "https://www.suse.com/security/cve/CVE-2019-1010220", }, { category: "external", summary: "SUSE Bug 1142439 for CVE-2019-1010220", url: "https://bugzilla.suse.com/1142439", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2019-1010220", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2019-1010220", }, { cve: "CVE-2019-15166", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-15166", }, ], notes: [ { category: "general", text: "lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-15166", url: "https://www.suse.com/security/cve/CVE-2019-15166", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2019-15166", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2019-15166", }, { cve: "CVE-2019-15167", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-15167", }, ], notes: [ { category: "general", text: "The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-15167", url: "https://www.suse.com/security/cve/CVE-2019-15167", }, { category: "external", summary: "SUSE Bug 1153098 for CVE-2019-15167", url: "https://bugzilla.suse.com/1153098", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2019-15167", }, { cve: "CVE-2020-8037", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-8037", }, ], notes: [ { category: "general", text: "The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-8037", url: "https://www.suse.com/security/cve/CVE-2020-8037", }, { category: "external", summary: "SUSE Bug 1178466 for CVE-2020-8037", url: "https://bugzilla.suse.com/1178466", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.aarch64", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.ppc64le", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.s390x", "openSUSE Tumbleweed:tcpdump-4.99.1-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-8037", }, ], }
gsd-2017-5202
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
Aliases
Aliases
{ GSD: { alias: "CVE-2017-5202", description: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", id: "GSD-2017-5202", references: [ "https://www.suse.com/security/cve/CVE-2017-5202.html", "https://www.debian.org/security/2017/dsa-3775", "https://access.redhat.com/errata/RHSA-2017:1871", "https://ubuntu.com/security/CVE-2017-5202", "https://advisories.mageia.org/CVE-2017-5202.html", "https://security.archlinux.org/CVE-2017-5202", "https://linux.oracle.com/cve/CVE-2017-5202.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2017-5202", ], details: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", id: "GSD-2017-5202", modified: "2023-12-13T01:21:13.815332Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2017-5202", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "1037755", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1037755", }, { name: "DSA-3775", refsource: "DEBIAN", url: "http://www.debian.org/security/2017/dsa-3775", }, { name: "RHSA-2017:1871", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { name: "https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1494526.html", refsource: "CONFIRM", url: "https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1494526.html", }, { name: "95852", refsource: "BID", url: "http://www.securityfocus.com/bid/95852", }, { name: "GLSA-201702-30", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201702-30", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "4.9.0", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2017-5202", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-119", }, ], }, ], }, references: { reference_data: [ { name: "https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1494526.html", refsource: "CONFIRM", tags: [ "Issue Tracking", "Mailing List", "Third Party Advisory", ], url: "https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1494526.html", }, { name: "95852", refsource: "BID", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/95852", }, { name: "GLSA-201702-30", refsource: "GENTOO", tags: [ "Third Party Advisory", ], url: "https://security.gentoo.org/glsa/201702-30", }, { name: "1037755", refsource: "SECTRACK", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1037755", }, { name: "DSA-3775", refsource: "DEBIAN", tags: [ "Third Party Advisory", ], url: "http://www.debian.org/security/2017/dsa-3775", }, { name: "RHSA-2017:1871", refsource: "REDHAT", tags: [ "Third Party Advisory", ], url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: true, cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 7.5, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "HIGH", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, exploitabilityScore: 3.9, impactScore: 5.9, }, }, lastModifiedDate: "2019-03-19T15:28Z", publishedDate: "2017-01-28T01:59Z", }, }, }
rhsa-2017:1871
Vulnerability from csaf_redhat
Published
2017-08-01 12:00
Modified
2024-11-22 10:45
Summary
Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update
Notes
Topic
An update for tcpdump is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
The following packages have been upgraded to a later upstream version: tcpdump (4.9.0). (BZ#1422473)
Security Fix(es):
* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)
Red Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for tcpdump is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version: tcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es):\n\n* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2017:1871", url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html", url: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html", }, { category: "external", summary: "1201792", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201792", }, { category: "external", summary: "1201795", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201795", }, { category: "external", summary: "1201797", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201797", }, { category: "external", summary: "1201798", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201798", }, { category: "external", summary: "1292056", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1292056", }, { category: "external", summary: "1296230", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1296230", }, { category: "external", summary: "1297812", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1297812", }, { category: "external", summary: "1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "1441597", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1441597", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1871.json", }, ], title: "Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update", tracking: { current_release_date: "2024-11-22T10:45:30+00:00", generator: { date: "2024-11-22T10:45:30+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2017:1871", initial_release_date: "2017-08-01T12:00:24+00:00", revision_history: [ { date: "2017-08-01T12:00:24+00:00", number: "1", summary: "Initial version", }, { date: "2017-08-01T12:00:24+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:45:30+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product: { name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::computenode", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.x86_64", product: { name: "tcpdump-14:4.9.0-5.el7.x86_64", product_id: "tcpdump-14:4.9.0-5.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=x86_64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=x86_64&epoch=14", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.src", product: { name: "tcpdump-14:4.9.0-5.el7.src", product_id: "tcpdump-14:4.9.0-5.el7.src", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=src&epoch=14", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.aarch64", product: { name: "tcpdump-14:4.9.0-5.el7.aarch64", product_id: "tcpdump-14:4.9.0-5.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=aarch64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=aarch64&epoch=14", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.ppc64le", product: { name: "tcpdump-14:4.9.0-5.el7.ppc64le", product_id: "tcpdump-14:4.9.0-5.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=ppc64le&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=ppc64le&epoch=14", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.ppc64", product: { name: "tcpdump-14:4.9.0-5.el7.ppc64", product_id: "tcpdump-14:4.9.0-5.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=ppc64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=ppc64&epoch=14", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.s390x", product: { name: "tcpdump-14:4.9.0-5.el7.s390x", product_id: "tcpdump-14:4.9.0-5.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=s390x&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=s390x&epoch=14", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Workstation", }, ], }, vulnerabilities: [ { cve: "CVE-2015-0261", discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201792", }, ], notes: [ { category: "description", text: "Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-0261", }, { category: "external", summary: "RHBZ#1201792", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201792", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-0261", url: "https://www.cve.org/CVERecord?id=CVE-2015-0261", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-0261", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-0261", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error", }, { cve: "CVE-2015-2153", discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201795", }, ], notes: [ { category: "description", text: "The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: tcp printer rpki_rtr_pdu_print() missing length check", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-2153", }, { category: "external", summary: "RHBZ#1201795", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201795", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-2153", url: "https://www.cve.org/CVERecord?id=CVE-2015-2153", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-2153", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-2153", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: tcp printer rpki_rtr_pdu_print() missing length check", }, { cve: "CVE-2015-2154", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201797", }, ], notes: [ { category: "description", text: "The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-2154", }, { category: "external", summary: "RHBZ#1201797", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201797", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-2154", url: "https://www.cve.org/CVERecord?id=CVE-2015-2154", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-2154", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-2154", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read", }, { cve: "CVE-2015-2155", discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201798", }, ], notes: [ { category: "description", text: "The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: force printer vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-2155", }, { category: "external", summary: "RHBZ#1201798", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201798", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-2155", url: "https://www.cve.org/CVERecord?id=CVE-2015-2155", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-2155", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-2155", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: force printer vulnerability", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7922", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7922", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7922", url: "https://www.cve.org/CVERecord?id=CVE-2016-7922", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7922", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7922", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7923", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7923", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7923", url: "https://www.cve.org/CVERecord?id=CVE-2016-7923", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7923", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7923", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7924", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7924", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7924", url: "https://www.cve.org/CVERecord?id=CVE-2016-7924", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7924", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7924", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7925", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7925", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7925", url: "https://www.cve.org/CVERecord?id=CVE-2016-7925", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7925", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7925", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7926", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7926", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7926", url: "https://www.cve.org/CVERecord?id=CVE-2016-7926", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7926", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7926", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7927", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7927", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7927", url: "https://www.cve.org/CVERecord?id=CVE-2016-7927", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7927", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7927", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7928", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7928", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7928", url: "https://www.cve.org/CVERecord?id=CVE-2016-7928", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7928", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7928", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7929", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7929", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7929", url: "https://www.cve.org/CVERecord?id=CVE-2016-7929", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7929", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7929", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7930", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7930", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7930", url: "https://www.cve.org/CVERecord?id=CVE-2016-7930", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7930", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7930", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7931", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7931", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7931", url: "https://www.cve.org/CVERecord?id=CVE-2016-7931", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7931", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7931", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7932", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7932", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7932", url: "https://www.cve.org/CVERecord?id=CVE-2016-7932", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7932", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7932", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7933", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7933", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7933", url: "https://www.cve.org/CVERecord?id=CVE-2016-7933", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7933", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7933", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7934", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7934", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7934", url: "https://www.cve.org/CVERecord?id=CVE-2016-7934", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7934", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7934", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7935", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7935", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7935", url: "https://www.cve.org/CVERecord?id=CVE-2016-7935", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7935", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7935", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7936", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7936", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7936", url: "https://www.cve.org/CVERecord?id=CVE-2016-7936", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7936", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7936", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7937", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7937", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7937", url: "https://www.cve.org/CVERecord?id=CVE-2016-7937", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7937", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7937", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7938", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7938", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7938", url: "https://www.cve.org/CVERecord?id=CVE-2016-7938", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7938", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7938", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7939", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7939", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7939", url: "https://www.cve.org/CVERecord?id=CVE-2016-7939", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7939", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7939", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7940", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7940", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7940", url: "https://www.cve.org/CVERecord?id=CVE-2016-7940", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7940", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7940", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7973", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7973", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7973", url: "https://www.cve.org/CVERecord?id=CVE-2016-7973", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7973", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7973", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7974", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7974", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7974", url: "https://www.cve.org/CVERecord?id=CVE-2016-7974", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7974", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7974", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7975", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7975", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7975", url: "https://www.cve.org/CVERecord?id=CVE-2016-7975", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7975", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7975", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7983", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7983", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7983", url: "https://www.cve.org/CVERecord?id=CVE-2016-7983", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7983", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7983", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7984", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7984", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7984", url: "https://www.cve.org/CVERecord?id=CVE-2016-7984", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7984", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7984", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7985", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7985", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7985", url: "https://www.cve.org/CVERecord?id=CVE-2016-7985", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7985", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7985", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7986", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7986", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7986", url: "https://www.cve.org/CVERecord?id=CVE-2016-7986", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7986", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7986", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7992", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7992", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7992", url: "https://www.cve.org/CVERecord?id=CVE-2016-7992", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7992", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7992", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7993", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7993", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7993", url: "https://www.cve.org/CVERecord?id=CVE-2016-7993", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7993", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7993", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-8574", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-8574", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-8574", url: "https://www.cve.org/CVERecord?id=CVE-2016-8574", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-8574", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-8574", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-8575", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-8575", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-8575", url: "https://www.cve.org/CVERecord?id=CVE-2016-8575", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-8575", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-8575", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5202", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5202", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5202", url: "https://www.cve.org/CVERecord?id=CVE-2017-5202", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5202", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5202", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5203", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5203", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5203", url: "https://www.cve.org/CVERecord?id=CVE-2017-5203", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5203", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5203", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5204", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5204", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5204", url: "https://www.cve.org/CVERecord?id=CVE-2017-5204", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5204", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5204", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5205", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5205", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5205", url: "https://www.cve.org/CVERecord?id=CVE-2017-5205", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5205", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5205", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5341", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5341", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5341", url: "https://www.cve.org/CVERecord?id=CVE-2017-5341", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5341", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5341", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5342", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5342", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5342", url: "https://www.cve.org/CVERecord?id=CVE-2017-5342", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5342", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5342", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5482", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5482", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5482", url: "https://www.cve.org/CVERecord?id=CVE-2017-5482", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5482", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5482", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5483", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5483", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5483", url: "https://www.cve.org/CVERecord?id=CVE-2017-5483", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5483", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5483", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5484", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5484", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5484", url: "https://www.cve.org/CVERecord?id=CVE-2017-5484", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5484", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5484", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5485", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5485", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5485", url: "https://www.cve.org/CVERecord?id=CVE-2017-5485", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5485", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5485", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5486", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5486", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5486", url: "https://www.cve.org/CVERecord?id=CVE-2017-5486", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5486", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5486", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, ], }
RHSA-2017:1871
Vulnerability from csaf_redhat
Published
2017-08-01 12:00
Modified
2024-11-22 10:45
Summary
Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update
Notes
Topic
An update for tcpdump is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
The following packages have been upgraded to a later upstream version: tcpdump (4.9.0). (BZ#1422473)
Security Fix(es):
* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)
Red Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for tcpdump is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version: tcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es):\n\n* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2017:1871", url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html", url: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html", }, { category: "external", summary: "1201792", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201792", }, { category: "external", summary: "1201795", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201795", }, { category: "external", summary: "1201797", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201797", }, { category: "external", summary: "1201798", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201798", }, { category: "external", summary: "1292056", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1292056", }, { category: "external", summary: "1296230", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1296230", }, { category: "external", summary: "1297812", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1297812", }, { category: "external", summary: "1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "1441597", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1441597", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1871.json", }, ], title: "Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update", tracking: { current_release_date: "2024-11-22T10:45:30+00:00", generator: { date: "2024-11-22T10:45:30+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2017:1871", initial_release_date: "2017-08-01T12:00:24+00:00", revision_history: [ { date: "2017-08-01T12:00:24+00:00", number: "1", summary: "Initial version", }, { date: "2017-08-01T12:00:24+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:45:30+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product: { name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::computenode", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.x86_64", product: { name: "tcpdump-14:4.9.0-5.el7.x86_64", product_id: "tcpdump-14:4.9.0-5.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=x86_64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=x86_64&epoch=14", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.src", product: { name: "tcpdump-14:4.9.0-5.el7.src", product_id: "tcpdump-14:4.9.0-5.el7.src", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=src&epoch=14", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.aarch64", product: { name: "tcpdump-14:4.9.0-5.el7.aarch64", product_id: "tcpdump-14:4.9.0-5.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=aarch64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=aarch64&epoch=14", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.ppc64le", product: { name: "tcpdump-14:4.9.0-5.el7.ppc64le", product_id: "tcpdump-14:4.9.0-5.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=ppc64le&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=ppc64le&epoch=14", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.ppc64", product: { name: "tcpdump-14:4.9.0-5.el7.ppc64", product_id: "tcpdump-14:4.9.0-5.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=ppc64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=ppc64&epoch=14", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.s390x", product: { name: "tcpdump-14:4.9.0-5.el7.s390x", product_id: "tcpdump-14:4.9.0-5.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=s390x&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=s390x&epoch=14", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Workstation", }, ], }, vulnerabilities: [ { cve: "CVE-2015-0261", discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201792", }, ], notes: [ { category: "description", text: "Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-0261", }, { category: "external", summary: "RHBZ#1201792", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201792", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-0261", url: "https://www.cve.org/CVERecord?id=CVE-2015-0261", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-0261", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-0261", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error", }, { cve: "CVE-2015-2153", discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201795", }, ], notes: [ { category: "description", text: "The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: tcp printer rpki_rtr_pdu_print() missing length check", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-2153", }, { category: "external", summary: "RHBZ#1201795", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201795", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-2153", url: "https://www.cve.org/CVERecord?id=CVE-2015-2153", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-2153", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-2153", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: tcp printer rpki_rtr_pdu_print() missing length check", }, { cve: "CVE-2015-2154", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201797", }, ], notes: [ { category: "description", text: "The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-2154", }, { category: "external", summary: "RHBZ#1201797", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201797", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-2154", url: "https://www.cve.org/CVERecord?id=CVE-2015-2154", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-2154", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-2154", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read", }, { cve: "CVE-2015-2155", discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201798", }, ], notes: [ { category: "description", text: "The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: force printer vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-2155", }, { category: "external", summary: "RHBZ#1201798", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201798", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-2155", url: "https://www.cve.org/CVERecord?id=CVE-2015-2155", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-2155", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-2155", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: force printer vulnerability", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7922", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7922", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7922", url: "https://www.cve.org/CVERecord?id=CVE-2016-7922", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7922", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7922", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7923", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7923", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7923", url: "https://www.cve.org/CVERecord?id=CVE-2016-7923", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7923", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7923", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7924", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7924", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7924", url: "https://www.cve.org/CVERecord?id=CVE-2016-7924", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7924", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7924", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7925", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7925", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7925", url: "https://www.cve.org/CVERecord?id=CVE-2016-7925", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7925", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7925", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7926", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7926", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7926", url: "https://www.cve.org/CVERecord?id=CVE-2016-7926", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7926", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7926", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7927", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7927", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7927", url: "https://www.cve.org/CVERecord?id=CVE-2016-7927", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7927", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7927", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7928", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7928", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7928", url: "https://www.cve.org/CVERecord?id=CVE-2016-7928", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7928", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7928", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7929", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7929", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7929", url: "https://www.cve.org/CVERecord?id=CVE-2016-7929", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7929", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7929", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7930", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7930", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7930", url: "https://www.cve.org/CVERecord?id=CVE-2016-7930", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7930", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7930", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7931", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7931", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7931", url: "https://www.cve.org/CVERecord?id=CVE-2016-7931", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7931", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7931", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7932", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7932", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7932", url: "https://www.cve.org/CVERecord?id=CVE-2016-7932", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7932", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7932", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7933", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7933", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7933", url: "https://www.cve.org/CVERecord?id=CVE-2016-7933", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7933", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7933", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7934", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7934", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7934", url: "https://www.cve.org/CVERecord?id=CVE-2016-7934", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7934", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7934", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7935", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7935", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7935", url: "https://www.cve.org/CVERecord?id=CVE-2016-7935", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7935", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7935", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7936", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7936", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7936", url: "https://www.cve.org/CVERecord?id=CVE-2016-7936", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7936", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7936", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7937", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7937", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7937", url: "https://www.cve.org/CVERecord?id=CVE-2016-7937", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7937", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7937", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7938", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7938", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7938", url: "https://www.cve.org/CVERecord?id=CVE-2016-7938", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7938", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7938", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7939", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7939", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7939", url: "https://www.cve.org/CVERecord?id=CVE-2016-7939", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7939", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7939", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7940", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7940", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7940", url: "https://www.cve.org/CVERecord?id=CVE-2016-7940", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7940", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7940", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7973", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7973", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7973", url: "https://www.cve.org/CVERecord?id=CVE-2016-7973", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7973", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7973", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7974", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7974", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7974", url: "https://www.cve.org/CVERecord?id=CVE-2016-7974", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7974", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7974", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7975", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7975", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7975", url: "https://www.cve.org/CVERecord?id=CVE-2016-7975", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7975", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7975", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7983", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7983", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7983", url: "https://www.cve.org/CVERecord?id=CVE-2016-7983", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7983", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7983", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7984", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7984", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7984", url: "https://www.cve.org/CVERecord?id=CVE-2016-7984", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7984", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7984", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7985", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7985", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7985", url: "https://www.cve.org/CVERecord?id=CVE-2016-7985", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7985", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7985", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7986", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7986", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7986", url: "https://www.cve.org/CVERecord?id=CVE-2016-7986", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7986", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7986", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7992", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7992", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7992", url: "https://www.cve.org/CVERecord?id=CVE-2016-7992", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7992", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7992", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7993", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7993", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7993", url: "https://www.cve.org/CVERecord?id=CVE-2016-7993", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7993", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7993", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-8574", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-8574", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-8574", url: "https://www.cve.org/CVERecord?id=CVE-2016-8574", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-8574", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-8574", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-8575", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-8575", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-8575", url: "https://www.cve.org/CVERecord?id=CVE-2016-8575", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-8575", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-8575", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5202", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5202", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5202", url: "https://www.cve.org/CVERecord?id=CVE-2017-5202", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5202", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5202", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5203", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5203", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5203", url: "https://www.cve.org/CVERecord?id=CVE-2017-5203", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5203", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5203", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5204", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5204", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5204", url: "https://www.cve.org/CVERecord?id=CVE-2017-5204", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5204", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5204", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5205", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5205", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5205", url: "https://www.cve.org/CVERecord?id=CVE-2017-5205", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5205", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5205", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5341", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5341", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5341", url: "https://www.cve.org/CVERecord?id=CVE-2017-5341", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5341", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5341", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5342", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5342", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5342", url: "https://www.cve.org/CVERecord?id=CVE-2017-5342", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5342", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5342", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5482", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5482", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5482", url: "https://www.cve.org/CVERecord?id=CVE-2017-5482", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5482", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5482", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5483", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5483", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5483", url: "https://www.cve.org/CVERecord?id=CVE-2017-5483", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5483", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5483", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5484", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5484", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5484", url: "https://www.cve.org/CVERecord?id=CVE-2017-5484", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5484", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5484", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5485", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5485", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5485", url: "https://www.cve.org/CVERecord?id=CVE-2017-5485", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5485", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5485", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5486", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5486", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5486", url: "https://www.cve.org/CVERecord?id=CVE-2017-5486", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5486", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5486", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, ], }
rhsa-2017_1871
Vulnerability from csaf_redhat
Published
2017-08-01 12:00
Modified
2024-11-22 10:45
Summary
Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update
Notes
Topic
An update for tcpdump is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
The following packages have been upgraded to a later upstream version: tcpdump (4.9.0). (BZ#1422473)
Security Fix(es):
* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)
Red Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for tcpdump is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version: tcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es):\n\n* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2017:1871", url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html", url: "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html", }, { category: "external", summary: "1201792", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201792", }, { category: "external", summary: "1201795", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201795", }, { category: "external", summary: "1201797", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201797", }, { category: "external", summary: "1201798", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201798", }, { category: "external", summary: "1292056", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1292056", }, { category: "external", summary: "1296230", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1296230", }, { category: "external", summary: "1297812", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1297812", }, { category: "external", summary: "1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "1441597", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1441597", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1871.json", }, ], title: "Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update", tracking: { current_release_date: "2024-11-22T10:45:30+00:00", generator: { date: "2024-11-22T10:45:30+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2017:1871", initial_release_date: "2017-08-01T12:00:24+00:00", revision_history: [ { date: "2017-08-01T12:00:24+00:00", number: "1", summary: "Initial version", }, { date: "2017-08-01T12:00:24+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:45:30+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product: { name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::computenode", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.x86_64", product: { name: "tcpdump-14:4.9.0-5.el7.x86_64", product_id: "tcpdump-14:4.9.0-5.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=x86_64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=x86_64&epoch=14", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.src", product: { name: "tcpdump-14:4.9.0-5.el7.src", product_id: "tcpdump-14:4.9.0-5.el7.src", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=src&epoch=14", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.aarch64", product: { name: "tcpdump-14:4.9.0-5.el7.aarch64", product_id: "tcpdump-14:4.9.0-5.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=aarch64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=aarch64&epoch=14", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.ppc64le", product: { name: "tcpdump-14:4.9.0-5.el7.ppc64le", product_id: "tcpdump-14:4.9.0-5.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=ppc64le&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=ppc64le&epoch=14", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.ppc64", product: { name: "tcpdump-14:4.9.0-5.el7.ppc64", product_id: "tcpdump-14:4.9.0-5.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=ppc64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=ppc64&epoch=14", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.0-5.el7.s390x", product: { name: "tcpdump-14:4.9.0-5.el7.s390x", product_id: "tcpdump-14:4.9.0-5.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.0-5.el7?arch=s390x&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", product: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", product_id: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.0-5.el7?arch=s390x&epoch=14", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Client", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7ComputeNode", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Server", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.src", }, product_reference: "tcpdump-14:4.9.0-5.el7.src", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.s390x", relates_to_product_reference: "7Workstation", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", relates_to_product_reference: "7Workstation", }, ], }, vulnerabilities: [ { cve: "CVE-2015-0261", discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201792", }, ], notes: [ { category: "description", text: "Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-0261", }, { category: "external", summary: "RHBZ#1201792", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201792", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-0261", url: "https://www.cve.org/CVERecord?id=CVE-2015-0261", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-0261", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-0261", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error", }, { cve: "CVE-2015-2153", discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201795", }, ], notes: [ { category: "description", text: "The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: tcp printer rpki_rtr_pdu_print() missing length check", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-2153", }, { category: "external", summary: "RHBZ#1201795", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201795", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-2153", url: "https://www.cve.org/CVERecord?id=CVE-2015-2153", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-2153", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-2153", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: tcp printer rpki_rtr_pdu_print() missing length check", }, { cve: "CVE-2015-2154", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201797", }, ], notes: [ { category: "description", text: "The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-2154", }, { category: "external", summary: "RHBZ#1201797", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201797", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-2154", url: "https://www.cve.org/CVERecord?id=CVE-2015-2154", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-2154", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-2154", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read", }, { cve: "CVE-2015-2155", discovery_date: "2015-03-10T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1201798", }, ], notes: [ { category: "description", text: "The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: force printer vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2015-2155", }, { category: "external", summary: "RHBZ#1201798", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1201798", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2015-2155", url: "https://www.cve.org/CVERecord?id=CVE-2015-2155", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2015-2155", url: "https://nvd.nist.gov/vuln/detail/CVE-2015-2155", }, ], release_date: "2015-03-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: force printer vulnerability", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7922", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7922", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7922", url: "https://www.cve.org/CVERecord?id=CVE-2016-7922", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7922", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7922", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7923", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7923", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7923", url: "https://www.cve.org/CVERecord?id=CVE-2016-7923", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7923", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7923", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7924", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7924", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7924", url: "https://www.cve.org/CVERecord?id=CVE-2016-7924", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7924", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7924", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7925", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7925", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7925", url: "https://www.cve.org/CVERecord?id=CVE-2016-7925", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7925", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7925", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7926", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7926", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7926", url: "https://www.cve.org/CVERecord?id=CVE-2016-7926", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7926", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7926", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7927", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7927", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7927", url: "https://www.cve.org/CVERecord?id=CVE-2016-7927", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7927", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7927", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7928", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7928", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7928", url: "https://www.cve.org/CVERecord?id=CVE-2016-7928", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7928", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7928", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7929", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7929", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7929", url: "https://www.cve.org/CVERecord?id=CVE-2016-7929", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7929", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7929", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7930", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7930", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7930", url: "https://www.cve.org/CVERecord?id=CVE-2016-7930", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7930", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7930", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7931", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7931", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7931", url: "https://www.cve.org/CVERecord?id=CVE-2016-7931", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7931", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7931", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7932", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7932", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7932", url: "https://www.cve.org/CVERecord?id=CVE-2016-7932", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7932", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7932", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7933", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7933", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7933", url: "https://www.cve.org/CVERecord?id=CVE-2016-7933", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7933", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7933", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7934", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7934", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7934", url: "https://www.cve.org/CVERecord?id=CVE-2016-7934", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7934", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7934", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7935", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7935", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7935", url: "https://www.cve.org/CVERecord?id=CVE-2016-7935", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7935", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7935", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7936", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7936", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7936", url: "https://www.cve.org/CVERecord?id=CVE-2016-7936", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7936", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7936", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7937", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7937", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7937", url: "https://www.cve.org/CVERecord?id=CVE-2016-7937", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7937", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7937", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7938", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7938", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7938", url: "https://www.cve.org/CVERecord?id=CVE-2016-7938", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7938", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7938", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7939", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7939", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7939", url: "https://www.cve.org/CVERecord?id=CVE-2016-7939", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7939", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7939", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7940", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7940", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7940", url: "https://www.cve.org/CVERecord?id=CVE-2016-7940", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7940", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7940", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7973", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7973", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7973", url: "https://www.cve.org/CVERecord?id=CVE-2016-7973", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7973", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7973", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7974", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7974", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7974", url: "https://www.cve.org/CVERecord?id=CVE-2016-7974", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7974", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7974", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7975", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7975", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7975", url: "https://www.cve.org/CVERecord?id=CVE-2016-7975", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7975", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7975", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7983", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7983", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7983", url: "https://www.cve.org/CVERecord?id=CVE-2016-7983", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7983", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7983", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7984", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7984", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7984", url: "https://www.cve.org/CVERecord?id=CVE-2016-7984", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7984", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7984", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7985", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7985", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7985", url: "https://www.cve.org/CVERecord?id=CVE-2016-7985", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7985", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7985", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7986", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7986", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7986", url: "https://www.cve.org/CVERecord?id=CVE-2016-7986", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7986", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7986", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7992", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7992", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7992", url: "https://www.cve.org/CVERecord?id=CVE-2016-7992", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7992", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7992", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-7993", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-7993", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-7993", url: "https://www.cve.org/CVERecord?id=CVE-2016-7993", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-7993", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-7993", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-8574", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-8574", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-8574", url: "https://www.cve.org/CVERecord?id=CVE-2016-8574", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-8574", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-8574", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2016-8575", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-8575", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-8575", url: "https://www.cve.org/CVERecord?id=CVE-2016-8575", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-8575", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-8575", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5202", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5202", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5202", url: "https://www.cve.org/CVERecord?id=CVE-2017-5202", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5202", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5202", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5203", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5203", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5203", url: "https://www.cve.org/CVERecord?id=CVE-2017-5203", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5203", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5203", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5204", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5204", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5204", url: "https://www.cve.org/CVERecord?id=CVE-2017-5204", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5204", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5204", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5205", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5205", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5205", url: "https://www.cve.org/CVERecord?id=CVE-2017-5205", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5205", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5205", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5341", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5341", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5341", url: "https://www.cve.org/CVERecord?id=CVE-2017-5341", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5341", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5341", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5342", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5342", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5342", url: "https://www.cve.org/CVERecord?id=CVE-2017-5342", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5342", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5342", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5482", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5482", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5482", url: "https://www.cve.org/CVERecord?id=CVE-2017-5482", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5482", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5482", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5483", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5483", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5483", url: "https://www.cve.org/CVERecord?id=CVE-2017-5483", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5483", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5483", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5484", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5484", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5484", url: "https://www.cve.org/CVERecord?id=CVE-2017-5484", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5484", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5484", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5485", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5485", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5485", url: "https://www.cve.org/CVERecord?id=CVE-2017-5485", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5485", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5485", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-5486", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, discovery_date: "2017-01-18T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1419066", }, ], notes: [ { category: "description", text: "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: multiple overflow issues in protocol decoding", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-5486", }, { category: "external", summary: "RHBZ#1419066", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1419066", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-5486", url: "https://www.cve.org/CVERecord?id=CVE-2017-5486", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-5486", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5486", }, ], release_date: "2017-02-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-01T12:00:24+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { category: "workaround", details: "When invoked with the \"-w\" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.", product_ids: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client:tcpdump-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-14:4.9.0-5.el7.s390x", "7Client:tcpdump-14:4.9.0-5.el7.src", "7Client:tcpdump-14:4.9.0-5.el7.x86_64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Client:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-14:4.9.0-5.el7.src", "7ComputeNode:tcpdump-14:4.9.0-5.el7.x86_64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7ComputeNode:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-14:4.9.0-5.el7.s390x", "7Server:tcpdump-14:4.9.0-5.el7.src", "7Server:tcpdump-14:4.9.0-5.el7.x86_64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Server:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-14:4.9.0-5.el7.src", "7Workstation:tcpdump-14:4.9.0-5.el7.x86_64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.aarch64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.ppc64le", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.s390x", "7Workstation:tcpdump-debuginfo-14:4.9.0-5.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: multiple overflow issues in protocol decoding", }, ], }
suse-su-2017:0656-1
Vulnerability from csaf_suse
Published
2017-03-10 13:36
Modified
2017-03-10 13:36
Summary
Security update for tcpdump
Notes
Title of the patch
Security update for tcpdump
Description of the patch
This update for tcpdump fixes the following issues:
Security issues fixed (bsc#1020940):
- CVE-2016-7922: Corrected buffer overflow in AH parser print-ah.c:ah_print().
- CVE-2016-7923: Corrected buffer overflow in ARP parser print-arp.c:arp_print().
- CVE-2016-7925: Corrected buffer overflow in compressed SLIP parser print-sl.c:sl_if_print().
- CVE-2016-7926: Corrected buffer overflow in the Ethernet parser print-ether.c:ethertype_print().
- CVE-2016-7927: Corrected buffer overflow in the IEEE 802.11 parser print-802_11.c:ieee802_11_radio_print().
- CVE-2016-7928: Corrected buffer overflow in the IPComp parser print-ipcomp.c:ipcomp_print().
- CVE-2016-7931: Corrected buffer overflow in the MPLS parser print-mpls.c:mpls_print().
- CVE-2016-7936: Corrected buffer overflow in the UDP parser print-udp.c:udp_print().
- CVE-2016-7934,CVE-2016-7935,CVE-2016-7937: Corrected segmentation faults in function udp_print().
- CVE-2016-7939: Corrected buffer overflows in GRE parser print-gre.c:(multiple functions).
- CVE-2016-7940: Corrected buffer overflows in STP parser print-stp.c:(multiple functions).
- CVE-2016-7973: Corrected buffer overflow in AppleTalk parser print-atalk.c.
- CVE-2016-7974: Corrected buffer overflow in IP parser print-ip.c:(multiple functions).
- CVE-2016-7975: Corrected buffer overflow in TCP parser print-tcp.c:tcp_print().
- CVE-2016-7983,CVE-2016-7984: Corrected buffer overflow in TFTP parser print-tftp.c:tftp_print().
- CVE-2016-7992: Corrected buffer overflow in Classical IP over ATM parser print-cip.c.
- CVE-2016-7993: Corrected buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, etc.).
- CVE-2016-8574: Corrected buffer overflow in FRF.15 parser print-fr.c:frf15_print().
- CVE-2017-5202: Corrected buffer overflow in ISO CLNS parser print-isoclns.c:clnp_print().
- CVE-2017-5203: Corrected buffer overflow in BOOTP parser print-bootp.c:bootp_print().
- CVE-2017-5204: Corrected buffer overflow in IPv6 parser print-ip6.c:ip6_print().
- CVE-2017-5483: Corrected buffer overflow in SNMP parser print-snmp.c:asn1_parse().
- CVE-2017-5484: Corrected buffer overflow in ATM parser print-atm.c:sig_print().
- CVE-2017-5485: Corrected buffer overflow in ISO CLNS parser addrtoname.c:lookup_nsap().
- CVE-2017-5486: Corrected buffer overflow in ISO CLNS parser print-isoclns.c:clnp_print().
Patchnames
slessp4-tcpdump-13021
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for tcpdump", title: "Title of the patch", }, { category: "description", text: "\nThis update for tcpdump fixes the following issues:\n\nSecurity issues fixed (bsc#1020940):\n- CVE-2016-7922: Corrected buffer overflow in AH parser print-ah.c:ah_print().\n- CVE-2016-7923: Corrected buffer overflow in ARP parser print-arp.c:arp_print().\n- CVE-2016-7925: Corrected buffer overflow in compressed SLIP parser print-sl.c:sl_if_print().\n- CVE-2016-7926: Corrected buffer overflow in the Ethernet parser print-ether.c:ethertype_print().\n- CVE-2016-7927: Corrected buffer overflow in the IEEE 802.11 parser print-802_11.c:ieee802_11_radio_print().\n- CVE-2016-7928: Corrected buffer overflow in the IPComp parser print-ipcomp.c:ipcomp_print().\n- CVE-2016-7931: Corrected buffer overflow in the MPLS parser print-mpls.c:mpls_print().\n- CVE-2016-7936: Corrected buffer overflow in the UDP parser print-udp.c:udp_print().\n- CVE-2016-7934,CVE-2016-7935,CVE-2016-7937: Corrected segmentation faults in function udp_print(). \n- CVE-2016-7939: Corrected buffer overflows in GRE parser print-gre.c:(multiple functions).\n- CVE-2016-7940: Corrected buffer overflows in STP parser print-stp.c:(multiple functions).\n- CVE-2016-7973: Corrected buffer overflow in AppleTalk parser print-atalk.c.\n- CVE-2016-7974: Corrected buffer overflow in IP parser print-ip.c:(multiple functions).\n- CVE-2016-7975: Corrected buffer overflow in TCP parser print-tcp.c:tcp_print().\n- CVE-2016-7983,CVE-2016-7984: Corrected buffer overflow in TFTP parser print-tftp.c:tftp_print().\n- CVE-2016-7992: Corrected buffer overflow in Classical IP over ATM parser print-cip.c.\n- CVE-2016-7993: Corrected buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, etc.).\n- CVE-2016-8574: Corrected buffer overflow in FRF.15 parser print-fr.c:frf15_print().\n- CVE-2017-5202: Corrected buffer overflow in ISO CLNS parser print-isoclns.c:clnp_print().\n- CVE-2017-5203: Corrected buffer overflow in BOOTP parser print-bootp.c:bootp_print().\n- CVE-2017-5204: Corrected buffer overflow in IPv6 parser print-ip6.c:ip6_print().\n- CVE-2017-5483: Corrected buffer overflow in SNMP parser print-snmp.c:asn1_parse().\n- CVE-2017-5484: Corrected buffer overflow in ATM parser print-atm.c:sig_print().\n- CVE-2017-5485: Corrected buffer overflow in ISO CLNS parser addrtoname.c:lookup_nsap().\n- CVE-2017-5486: Corrected buffer overflow in ISO CLNS parser print-isoclns.c:clnp_print().\n", title: "Description of the patch", }, { category: "details", text: "slessp4-tcpdump-13021", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0656-1.json", }, { category: "self", summary: "URL for SUSE-SU-2017:0656-1", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20170656-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2017:0656-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html", }, { category: "self", summary: "SUSE Bug 1020940", url: "https://bugzilla.suse.com/1020940", }, { category: "self", summary: "SUSE CVE CVE-2016-7922 page", url: "https://www.suse.com/security/cve/CVE-2016-7922/", }, { category: "self", summary: "SUSE CVE CVE-2016-7923 page", url: "https://www.suse.com/security/cve/CVE-2016-7923/", }, { category: "self", summary: "SUSE CVE CVE-2016-7925 page", url: "https://www.suse.com/security/cve/CVE-2016-7925/", }, { category: "self", summary: "SUSE CVE CVE-2016-7926 page", url: "https://www.suse.com/security/cve/CVE-2016-7926/", }, { category: "self", summary: "SUSE CVE CVE-2016-7927 page", url: "https://www.suse.com/security/cve/CVE-2016-7927/", }, { category: "self", summary: "SUSE CVE CVE-2016-7928 page", url: "https://www.suse.com/security/cve/CVE-2016-7928/", }, { category: "self", summary: "SUSE CVE CVE-2016-7931 page", url: "https://www.suse.com/security/cve/CVE-2016-7931/", }, { category: "self", summary: "SUSE CVE CVE-2016-7934 page", url: "https://www.suse.com/security/cve/CVE-2016-7934/", }, { category: "self", summary: "SUSE CVE CVE-2016-7935 page", url: "https://www.suse.com/security/cve/CVE-2016-7935/", }, { category: "self", summary: "SUSE CVE CVE-2016-7936 page", url: "https://www.suse.com/security/cve/CVE-2016-7936/", }, { category: "self", summary: "SUSE CVE CVE-2016-7937 page", url: "https://www.suse.com/security/cve/CVE-2016-7937/", }, { category: "self", summary: "SUSE CVE CVE-2016-7939 page", url: "https://www.suse.com/security/cve/CVE-2016-7939/", }, { category: "self", summary: "SUSE CVE CVE-2016-7940 page", url: "https://www.suse.com/security/cve/CVE-2016-7940/", }, { category: "self", summary: "SUSE CVE CVE-2016-7973 page", url: "https://www.suse.com/security/cve/CVE-2016-7973/", }, { category: "self", summary: "SUSE CVE CVE-2016-7974 page", url: "https://www.suse.com/security/cve/CVE-2016-7974/", }, { category: "self", summary: "SUSE CVE CVE-2016-7975 page", url: "https://www.suse.com/security/cve/CVE-2016-7975/", }, { category: "self", summary: "SUSE CVE CVE-2016-7983 page", url: "https://www.suse.com/security/cve/CVE-2016-7983/", }, { category: "self", summary: "SUSE CVE CVE-2016-7984 page", url: "https://www.suse.com/security/cve/CVE-2016-7984/", }, { category: "self", summary: "SUSE CVE CVE-2016-7992 page", url: "https://www.suse.com/security/cve/CVE-2016-7992/", }, { category: "self", summary: "SUSE CVE CVE-2016-7993 page", url: "https://www.suse.com/security/cve/CVE-2016-7993/", }, { category: "self", summary: "SUSE CVE CVE-2016-8574 page", url: "https://www.suse.com/security/cve/CVE-2016-8574/", }, { category: "self", summary: "SUSE CVE CVE-2017-5202 page", url: "https://www.suse.com/security/cve/CVE-2017-5202/", }, { category: "self", summary: "SUSE CVE CVE-2017-5203 page", url: "https://www.suse.com/security/cve/CVE-2017-5203/", }, { category: "self", summary: "SUSE CVE CVE-2017-5204 page", url: "https://www.suse.com/security/cve/CVE-2017-5204/", }, { category: "self", summary: "SUSE CVE CVE-2017-5483 page", url: "https://www.suse.com/security/cve/CVE-2017-5483/", }, { category: "self", summary: "SUSE CVE CVE-2017-5484 page", url: "https://www.suse.com/security/cve/CVE-2017-5484/", }, { category: "self", summary: "SUSE CVE CVE-2017-5485 page", url: "https://www.suse.com/security/cve/CVE-2017-5485/", }, { category: "self", summary: "SUSE CVE CVE-2017-5486 page", url: "https://www.suse.com/security/cve/CVE-2017-5486/", }, ], title: "Security update for tcpdump", tracking: { current_release_date: "2017-03-10T13:36:29Z", generator: { date: "2017-03-10T13:36:29Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2017:0656-1", initial_release_date: "2017-03-10T13:36:29Z", revision_history: [ { date: "2017-03-10T13:36:29Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "tcpdump-3.9.8-1.29.1.i586", product: { name: "tcpdump-3.9.8-1.29.1.i586", product_id: "tcpdump-3.9.8-1.29.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "tcpdump-3.9.8-1.29.1.ia64", product: { name: "tcpdump-3.9.8-1.29.1.ia64", product_id: "tcpdump-3.9.8-1.29.1.ia64", }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "tcpdump-3.9.8-1.29.1.ppc64", product: { name: "tcpdump-3.9.8-1.29.1.ppc64", product_id: "tcpdump-3.9.8-1.29.1.ppc64", }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tcpdump-3.9.8-1.29.1.s390x", product: { name: "tcpdump-3.9.8-1.29.1.s390x", product_id: "tcpdump-3.9.8-1.29.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "tcpdump-3.9.8-1.29.1.x86_64", product: { name: "tcpdump-3.9.8-1.29.1.x86_64", product_id: "tcpdump-3.9.8-1.29.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Server 11 SP4", product: { name: "SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4", product_identification_helper: { cpe: "cpe:/o:suse:suse_sles:11:sp4", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product: { name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:11:sp4", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", }, product_reference: "tcpdump-3.9.8-1.29.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", }, product_reference: "tcpdump-3.9.8-1.29.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", }, product_reference: "tcpdump-3.9.8-1.29.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", }, product_reference: "tcpdump-3.9.8-1.29.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", }, product_reference: "tcpdump-3.9.8-1.29.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", }, product_reference: "tcpdump-3.9.8-1.29.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", }, product_reference: "tcpdump-3.9.8-1.29.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", }, product_reference: "tcpdump-3.9.8-1.29.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", }, product_reference: "tcpdump-3.9.8-1.29.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "tcpdump-3.9.8-1.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", }, product_reference: "tcpdump-3.9.8-1.29.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, ], }, vulnerabilities: [ { cve: "CVE-2016-7922", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7922", }, ], notes: [ { category: "general", text: "The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7922", url: "https://www.suse.com/security/cve/CVE-2016-7922", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7922", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7922", }, { cve: "CVE-2016-7923", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7923", }, ], notes: [ { category: "general", text: "The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7923", url: "https://www.suse.com/security/cve/CVE-2016-7923", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7923", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7923", }, { cve: "CVE-2016-7925", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7925", }, ], notes: [ { category: "general", text: "The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7925", url: "https://www.suse.com/security/cve/CVE-2016-7925", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7925", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7925", }, { cve: "CVE-2016-7926", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7926", }, ], notes: [ { category: "general", text: "The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7926", url: "https://www.suse.com/security/cve/CVE-2016-7926", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7926", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7926", }, { cve: "CVE-2016-7927", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7927", }, ], notes: [ { category: "general", text: "The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7927", url: "https://www.suse.com/security/cve/CVE-2016-7927", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7927", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7927", }, { cve: "CVE-2016-7928", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7928", }, ], notes: [ { category: "general", text: "The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7928", url: "https://www.suse.com/security/cve/CVE-2016-7928", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7928", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7928", }, { cve: "CVE-2016-7931", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7931", }, ], notes: [ { category: "general", text: "The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7931", url: "https://www.suse.com/security/cve/CVE-2016-7931", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7931", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7931", }, { cve: "CVE-2016-7934", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7934", }, ], notes: [ { category: "general", text: "The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7934", url: "https://www.suse.com/security/cve/CVE-2016-7934", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7934", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7934", }, { cve: "CVE-2016-7935", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7935", }, ], notes: [ { category: "general", text: "The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7935", url: "https://www.suse.com/security/cve/CVE-2016-7935", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7935", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7935", }, { cve: "CVE-2016-7936", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7936", }, ], notes: [ { category: "general", text: "The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7936", url: "https://www.suse.com/security/cve/CVE-2016-7936", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7936", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7936", }, { cve: "CVE-2016-7937", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7937", }, ], notes: [ { category: "general", text: "The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7937", url: "https://www.suse.com/security/cve/CVE-2016-7937", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7937", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7937", }, { cve: "CVE-2016-7939", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7939", }, ], notes: [ { category: "general", text: "The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7939", url: "https://www.suse.com/security/cve/CVE-2016-7939", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7939", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7939", }, { cve: "CVE-2016-7940", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7940", }, ], notes: [ { category: "general", text: "The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7940", url: "https://www.suse.com/security/cve/CVE-2016-7940", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7940", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7940", }, { cve: "CVE-2016-7973", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7973", }, ], notes: [ { category: "general", text: "The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7973", url: "https://www.suse.com/security/cve/CVE-2016-7973", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7973", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7973", }, { cve: "CVE-2016-7974", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7974", }, ], notes: [ { category: "general", text: "The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7974", url: "https://www.suse.com/security/cve/CVE-2016-7974", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7974", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7974", }, { cve: "CVE-2016-7975", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7975", }, ], notes: [ { category: "general", text: "The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7975", url: "https://www.suse.com/security/cve/CVE-2016-7975", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7975", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7975", }, { cve: "CVE-2016-7983", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7983", }, ], notes: [ { category: "general", text: "The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7983", url: "https://www.suse.com/security/cve/CVE-2016-7983", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7983", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7983", }, { cve: "CVE-2016-7984", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7984", }, ], notes: [ { category: "general", text: "The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7984", url: "https://www.suse.com/security/cve/CVE-2016-7984", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7984", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7984", }, { cve: "CVE-2016-7992", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7992", }, ], notes: [ { category: "general", text: "The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7992", url: "https://www.suse.com/security/cve/CVE-2016-7992", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7992", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7992", }, { cve: "CVE-2016-7993", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7993", }, ], notes: [ { category: "general", text: "A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM).", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7993", url: "https://www.suse.com/security/cve/CVE-2016-7993", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7993", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-7993", }, { cve: "CVE-2016-8574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-8574", }, ], notes: [ { category: "general", text: "The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-8574", url: "https://www.suse.com/security/cve/CVE-2016-8574", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-8574", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2016-8574", }, { cve: "CVE-2017-5202", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5202", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5202", url: "https://www.suse.com/security/cve/CVE-2017-5202", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5202", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2017-5202", }, { cve: "CVE-2017-5203", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5203", }, ], notes: [ { category: "general", text: "The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5203", url: "https://www.suse.com/security/cve/CVE-2017-5203", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5203", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2017-5203", }, { cve: "CVE-2017-5204", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5204", }, ], notes: [ { category: "general", text: "The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5204", url: "https://www.suse.com/security/cve/CVE-2017-5204", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5204", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2017-5204", }, { cve: "CVE-2017-5483", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5483", }, ], notes: [ { category: "general", text: "The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5483", url: "https://www.suse.com/security/cve/CVE-2017-5483", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5483", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2017-5483", }, { cve: "CVE-2017-5484", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5484", }, ], notes: [ { category: "general", text: "The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5484", url: "https://www.suse.com/security/cve/CVE-2017-5484", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5484", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2017-5484", }, { cve: "CVE-2017-5485", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5485", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5485", url: "https://www.suse.com/security/cve/CVE-2017-5485", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5485", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2017-5485", }, { cve: "CVE-2017-5486", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5486", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5486", url: "https://www.suse.com/security/cve/CVE-2017-5486", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5486", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tcpdump-3.9.8-1.29.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-03-10T13:36:29Z", details: "moderate", }, ], title: "CVE-2017-5486", }, ], }
suse-su-2017:1110-1
Vulnerability from csaf_suse
Published
2017-04-26 15:31
Modified
2017-04-26 15:31
Summary
Security update for tcpdump, libpcap
Notes
Title of the patch
Security update for tcpdump, libpcap
Description of the patch
This update for tcpdump to version 4.9.0 and libpcap to version 1.8.1 fixes the several issues.
These security issues were fixed in tcpdump:
- CVE-2016-7922: The AH parser in tcpdump had a buffer overflow in print-ah.c:ah_print() (bsc#1020940).
- CVE-2016-7923: The ARP parser in tcpdump had a buffer overflow in print-arp.c:arp_print() (bsc#1020940).
- CVE-2016-7924: The ATM parser in tcpdump had a buffer overflow in print-atm.c:oam_print() (bsc#1020940).
- CVE-2016-7925: The compressed SLIP parser in tcpdump had a buffer overflow in print-sl.c:sl_if_print() (bsc#1020940).
- CVE-2016-7926: The Ethernet parser in tcpdump had a buffer overflow in print-ether.c:ethertype_print() (bsc#1020940).
- CVE-2016-7927: The IEEE 802.11 parser in tcpdump had a buffer overflow in print-802_11.c:ieee802_11_radio_print() (bsc#1020940).
- CVE-2016-7928: The IPComp parser in tcpdump had a buffer overflow in print-ipcomp.c:ipcomp_print() (bsc#1020940).
- CVE-2016-7929: The Juniper PPPoE ATM parser in tcpdump had a buffer overflow in print-juniper.c:juniper_parse_header() (bsc#1020940).
- CVE-2016-7930: The LLC/SNAP parser in tcpdump had a buffer overflow in print-llc.c:llc_print() (bsc#1020940).
- CVE-2016-7931: The MPLS parser in tcpdump had a buffer overflow in print-mpls.c:mpls_print() (bsc#1020940).
- CVE-2016-7932: The PIM parser in tcpdump had a buffer overflow in print-pim.c:pimv2_check_checksum() (bsc#1020940).
- CVE-2016-7933: The PPP parser in tcpdump had a buffer overflow in print-ppp.c:ppp_hdlc_if_print() (bsc#1020940).
- CVE-2016-7934: The RTCP parser in tcpdump had a buffer overflow in print-udp.c:rtcp_print() (bsc#1020940).
- CVE-2016-7935: The RTP parser in tcpdump had a buffer overflow in print-udp.c:rtp_print() (bsc#1020940).
- CVE-2016-7936: The UDP parser in tcpdump had a buffer overflow in print-udp.c:udp_print() (bsc#1020940).
- CVE-2016-7937: The VAT parser in tcpdump had a buffer overflow in print-udp.c:vat_print() (bsc#1020940).
- CVE-2016-7938: The ZeroMQ parser in tcpdump had an integer overflow in print-zeromq.c:zmtp1_print_frame() (bsc#1020940).
- CVE-2016-7939: The GRE parser in tcpdump had a buffer overflow in print-gre.c, multiple functions (bsc#1020940).
- CVE-2016-7940: The STP parser in tcpdump had a buffer overflow in print-stp.c, multiple functions (bsc#1020940).
- CVE-2016-7973: The AppleTalk parser in tcpdump had a buffer overflow in print-atalk.c, multiple functions (bsc#1020940).
- CVE-2016-7974: The IP parser in tcpdump had a buffer overflow in print-ip.c, multiple functions (bsc#1020940).
- CVE-2016-7975: The TCP parser in tcpdump had a buffer overflow in print-tcp.c:tcp_print() (bsc#1020940).
- CVE-2016-7983: The BOOTP parser in tcpdump had a buffer overflow in print-bootp.c:bootp_print() (bsc#1020940).
- CVE-2016-7984: The TFTP parser in tcpdump had a buffer overflow in print-tftp.c:tftp_print() (bsc#1020940).
- CVE-2016-7985: The CALM FAST parser in tcpdump had a buffer overflow in print-calm-fast.c:calm_fast_print() (bsc#1020940).
- CVE-2016-7986: The GeoNetworking parser in tcpdump had a buffer overflow in print-geonet.c, multiple functions (bsc#1020940).
- CVE-2016-7992: The Classical IP over ATM parser in tcpdump had a buffer overflow in print-cip.c:cip_if_print() (bsc#1020940).
- CVE-2016-7993: A bug in util-print.c:relts_print() in tcpdump could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM) (bsc#1020940).
- CVE-2016-8574: The FRF.15 parser in tcpdump had a buffer overflow in print-fr.c:frf15_print() (bsc#1020940).
- CVE-2016-8575: The Q.933 parser in tcpdump had a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482 (bsc#1020940).
- CVE-2017-5202: The ISO CLNS parser in tcpdump had a buffer overflow in print-isoclns.c:clnp_print() (bsc#1020940).
- CVE-2017-5203: The BOOTP parser in tcpdump had a buffer overflow in print-bootp.c:bootp_print() (bsc#1020940).
- CVE-2017-5204: The IPv6 parser in tcpdump had a buffer overflow in print-ip6.c:ip6_print() (bsc#1020940).
- CVE-2017-5205: The ISAKMP parser in tcpdump had a buffer overflow in print-isakmp.c:ikev2_e_print() (bsc#1020940).
- CVE-2017-5341: The OTV parser in tcpdump had a buffer overflow in print-otv.c:otv_print() (bsc#1020940).
- CVE-2017-5342: In tcpdump a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print() (bsc#1020940).
- CVE-2017-5482: The Q.933 parser in tcpdump had a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575 (bsc#1020940).
- CVE-2017-5483: The SNMP parser in tcpdump had a buffer overflow in print-snmp.c:asn1_parse() (bsc#1020940).
- CVE-2017-5484: The ATM parser in tcpdump had a buffer overflow in print-atm.c:sig_print() (bsc#1020940).
- CVE-2017-5485: The ISO CLNS parser in tcpdump had a buffer overflow in addrtoname.c:lookup_nsap() (bsc#1020940).
- CVE-2017-5486: The ISO CLNS parser in tcpdump had a buffer overflow in print-isoclns.c:clnp_print() (bsc#1020940).
- CVE-2015-3138: Fixed potential denial of service in print-wb.c (bsc#927637).
- CVE-2015-0261: Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value (bsc#922220).
- CVE-2015-2153: The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU) (bsc#922221).
- CVE-2015-2154: The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value (bsc#922222).
- CVE-2015-2155: The force printer in tcpdump allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors (bsc#922223).
- CVE-2014-8767: Integer underflow in the olsr_print function in tcpdump 3.9.6 when in verbose mode, allowed remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame (bsc#905870).
- CVE-2014-8768: Multiple Integer underflows in the geonet_print function in tcpdump when run in verbose mode, allowed remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame (bsc#905871).
- CVE-2014-8769: tcpdump might have allowed remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access (bsc#905872).
These non-security issues were fixed in tcpdump:
- PPKI to Router Protocol: Fix Segmentation Faults and other problems
- RPKI to Router Protocol: print strings with fn_printn()
- Added a short option '#', same as long option '--number'
- nflog, mobile, forces, pptp, AODV, AHCP, IPv6, OSPFv4, RPL, DHCPv6 enhancements/fixes
- M3UA decode added.
- Added bittok2str().
- A number of unaligned access faults fixed
- The -A flag does not consider CR to be printable anymore
- fx.lebail took over coverity baby sitting
- Default snapshot size increased to 256K for accomodate USB captures
These non-security issues were fixed in libpcap:
- Provide a -devel-static subpackage that contains the static
libraries and all the extra dependencies which are not needed
for dynamic linking.
- Fix handling of packet count in the TPACKET_V3 inner loop
- Filter out duplicate looped back CAN frames.
- Fix the handling of loopback filters for IPv6 packets.
- Add a link-layer header type for RDS (IEC 62106) groups.
- Handle all CAN captures with pcap-linux.c, in cooked mode.
- Removes the need for the 'host-endian' link-layer header type.
- Have separate DLTs for big-endian and host-endian SocketCAN headers.
- Properly check for sock_recv() errors.
- Re-impose some of Winsock's limitations on sock_recv().
- Replace sprintf() with pcap_snprintf().
- Fix signature of pcap_stats_ex_remote().
- Have rpcap_remoteact_getsock() return a SOCKET and supply an 'is active' flag.
- Clean up {DAG, Septel, Myricom SNF}-only builds.
- pcap_create_interface() needs the interface name on Linux.
- Clean up hardware time stamp support: the 'any' device does not support any time stamp types.
- Recognize 802.1ad nested VLAN tag in vlan filter.
- Support for filtering Geneve encapsulated packets.
- Fix handling of zones for BPF on Solaris
- Added bpf_filter1() with extensions
- EBUSY can now be returned by SNFv3 code.
- Don't crash on filters testing a non-existent link-layer type field.
- Fix sending in non-blocking mode on Linux with memory-mapped capture.
- Fix timestamps when reading pcap-ng files on big-endian machines.
- Fixes for byte order issues with NFLOG captures
- Handle using cooked mode for DLT_NETLINK in activate_new().
Patchnames
SUSE-SLE-DESKTOP-12-SP1-2017-644,SUSE-SLE-DESKTOP-12-SP2-2017-644,SUSE-SLE-RPI-12-SP2-2017-644,SUSE-SLE-SDK-12-SP1-2017-644,SUSE-SLE-SDK-12-SP2-2017-644,SUSE-SLE-SERVER-12-SP1-2017-644,SUSE-SLE-SERVER-12-SP2-2017-644,SUSE-SLE-WE-12-SP1-2017-644,SUSE-SLE-WE-12-SP2-2017-644
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for tcpdump, libpcap", title: "Title of the patch", }, { category: "description", text: "\nThis update for tcpdump to version 4.9.0 and libpcap to version 1.8.1 fixes the several issues.\n\nThese security issues were fixed in tcpdump:\n\n- CVE-2016-7922: The AH parser in tcpdump had a buffer overflow in print-ah.c:ah_print() (bsc#1020940).\n- CVE-2016-7923: The ARP parser in tcpdump had a buffer overflow in print-arp.c:arp_print() (bsc#1020940).\n- CVE-2016-7924: The ATM parser in tcpdump had a buffer overflow in print-atm.c:oam_print() (bsc#1020940).\n- CVE-2016-7925: The compressed SLIP parser in tcpdump had a buffer overflow in print-sl.c:sl_if_print() (bsc#1020940).\n- CVE-2016-7926: The Ethernet parser in tcpdump had a buffer overflow in print-ether.c:ethertype_print() (bsc#1020940).\n- CVE-2016-7927: The IEEE 802.11 parser in tcpdump had a buffer overflow in print-802_11.c:ieee802_11_radio_print() (bsc#1020940).\n- CVE-2016-7928: The IPComp parser in tcpdump had a buffer overflow in print-ipcomp.c:ipcomp_print() (bsc#1020940).\n- CVE-2016-7929: The Juniper PPPoE ATM parser in tcpdump had a buffer overflow in print-juniper.c:juniper_parse_header() (bsc#1020940).\n- CVE-2016-7930: The LLC/SNAP parser in tcpdump had a buffer overflow in print-llc.c:llc_print() (bsc#1020940).\n- CVE-2016-7931: The MPLS parser in tcpdump had a buffer overflow in print-mpls.c:mpls_print() (bsc#1020940).\n- CVE-2016-7932: The PIM parser in tcpdump had a buffer overflow in print-pim.c:pimv2_check_checksum() (bsc#1020940).\n- CVE-2016-7933: The PPP parser in tcpdump had a buffer overflow in print-ppp.c:ppp_hdlc_if_print() (bsc#1020940).\n- CVE-2016-7934: The RTCP parser in tcpdump had a buffer overflow in print-udp.c:rtcp_print() (bsc#1020940).\n- CVE-2016-7935: The RTP parser in tcpdump had a buffer overflow in print-udp.c:rtp_print() (bsc#1020940).\n- CVE-2016-7936: The UDP parser in tcpdump had a buffer overflow in print-udp.c:udp_print() (bsc#1020940).\n- CVE-2016-7937: The VAT parser in tcpdump had a buffer overflow in print-udp.c:vat_print() (bsc#1020940).\n- CVE-2016-7938: The ZeroMQ parser in tcpdump had an integer overflow in print-zeromq.c:zmtp1_print_frame() (bsc#1020940).\n- CVE-2016-7939: The GRE parser in tcpdump had a buffer overflow in print-gre.c, multiple functions (bsc#1020940).\n- CVE-2016-7940: The STP parser in tcpdump had a buffer overflow in print-stp.c, multiple functions (bsc#1020940).\n- CVE-2016-7973: The AppleTalk parser in tcpdump had a buffer overflow in print-atalk.c, multiple functions (bsc#1020940).\n- CVE-2016-7974: The IP parser in tcpdump had a buffer overflow in print-ip.c, multiple functions (bsc#1020940).\n- CVE-2016-7975: The TCP parser in tcpdump had a buffer overflow in print-tcp.c:tcp_print() (bsc#1020940).\n- CVE-2016-7983: The BOOTP parser in tcpdump had a buffer overflow in print-bootp.c:bootp_print() (bsc#1020940).\n- CVE-2016-7984: The TFTP parser in tcpdump had a buffer overflow in print-tftp.c:tftp_print() (bsc#1020940).\n- CVE-2016-7985: The CALM FAST parser in tcpdump had a buffer overflow in print-calm-fast.c:calm_fast_print() (bsc#1020940).\n- CVE-2016-7986: The GeoNetworking parser in tcpdump had a buffer overflow in print-geonet.c, multiple functions (bsc#1020940).\n- CVE-2016-7992: The Classical IP over ATM parser in tcpdump had a buffer overflow in print-cip.c:cip_if_print() (bsc#1020940).\n- CVE-2016-7993: A bug in util-print.c:relts_print() in tcpdump could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM) (bsc#1020940).\n- CVE-2016-8574: The FRF.15 parser in tcpdump had a buffer overflow in print-fr.c:frf15_print() (bsc#1020940).\n- CVE-2016-8575: The Q.933 parser in tcpdump had a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482 (bsc#1020940).\n- CVE-2017-5202: The ISO CLNS parser in tcpdump had a buffer overflow in print-isoclns.c:clnp_print() (bsc#1020940).\n- CVE-2017-5203: The BOOTP parser in tcpdump had a buffer overflow in print-bootp.c:bootp_print() (bsc#1020940).\n- CVE-2017-5204: The IPv6 parser in tcpdump had a buffer overflow in print-ip6.c:ip6_print() (bsc#1020940).\n- CVE-2017-5205: The ISAKMP parser in tcpdump had a buffer overflow in print-isakmp.c:ikev2_e_print() (bsc#1020940).\n- CVE-2017-5341: The OTV parser in tcpdump had a buffer overflow in print-otv.c:otv_print() (bsc#1020940).\n- CVE-2017-5342: In tcpdump a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print() (bsc#1020940).\n- CVE-2017-5482: The Q.933 parser in tcpdump had a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575 (bsc#1020940).\n- CVE-2017-5483: The SNMP parser in tcpdump had a buffer overflow in print-snmp.c:asn1_parse() (bsc#1020940).\n- CVE-2017-5484: The ATM parser in tcpdump had a buffer overflow in print-atm.c:sig_print() (bsc#1020940).\n- CVE-2017-5485: The ISO CLNS parser in tcpdump had a buffer overflow in addrtoname.c:lookup_nsap() (bsc#1020940).\n- CVE-2017-5486: The ISO CLNS parser in tcpdump had a buffer overflow in print-isoclns.c:clnp_print() (bsc#1020940).\n- CVE-2015-3138: Fixed potential denial of service in print-wb.c (bsc#927637).\n- CVE-2015-0261: Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value (bsc#922220).\n- CVE-2015-2153: The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU) (bsc#922221).\n- CVE-2015-2154: The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value (bsc#922222).\n- CVE-2015-2155: The force printer in tcpdump allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors (bsc#922223).\n- CVE-2014-8767: Integer underflow in the olsr_print function in tcpdump 3.9.6 when in verbose mode, allowed remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame (bsc#905870).\n- CVE-2014-8768: Multiple Integer underflows in the geonet_print function in tcpdump when run in verbose mode, allowed remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame (bsc#905871).\n- CVE-2014-8769: tcpdump might have allowed remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access (bsc#905872).\n\nThese non-security issues were fixed in tcpdump:\n\n- PPKI to Router Protocol: Fix Segmentation Faults and other problems\n- RPKI to Router Protocol: print strings with fn_printn()\n- Added a short option '#', same as long option '--number'\n- nflog, mobile, forces, pptp, AODV, AHCP, IPv6, OSPFv4, RPL, DHCPv6 enhancements/fixes\n- M3UA decode added.\n- Added bittok2str().\n- A number of unaligned access faults fixed\n- The -A flag does not consider CR to be printable anymore\n- fx.lebail took over coverity baby sitting\n- Default snapshot size increased to 256K for accomodate USB captures\n\nThese non-security issues were fixed in libpcap:\n\n- Provide a -devel-static subpackage that contains the static\n libraries and all the extra dependencies which are not needed\n for dynamic linking.\n- Fix handling of packet count in the TPACKET_V3 inner loop\n- Filter out duplicate looped back CAN frames.\n- Fix the handling of loopback filters for IPv6 packets.\n- Add a link-layer header type for RDS (IEC 62106) groups.\n- Handle all CAN captures with pcap-linux.c, in cooked mode.\n- Removes the need for the 'host-endian' link-layer header type.\n- Have separate DLTs for big-endian and host-endian SocketCAN headers.\n- Properly check for sock_recv() errors.\n- Re-impose some of Winsock's limitations on sock_recv().\n- Replace sprintf() with pcap_snprintf().\n- Fix signature of pcap_stats_ex_remote().\n- Have rpcap_remoteact_getsock() return a SOCKET and supply an 'is active' flag.\n- Clean up {DAG, Septel, Myricom SNF}-only builds.\n- pcap_create_interface() needs the interface name on Linux.\n- Clean up hardware time stamp support: the 'any' device does not support any time stamp types.\n- Recognize 802.1ad nested VLAN tag in vlan filter.\n- Support for filtering Geneve encapsulated packets.\n- Fix handling of zones for BPF on Solaris\n- Added bpf_filter1() with extensions\n- EBUSY can now be returned by SNFv3 code.\n- Don't crash on filters testing a non-existent link-layer type field.\n- Fix sending in non-blocking mode on Linux with memory-mapped capture.\n- Fix timestamps when reading pcap-ng files on big-endian machines.\n- Fixes for byte order issues with NFLOG captures\n- Handle using cooked mode for DLT_NETLINK in activate_new().\n", title: "Description of the patch", }, { category: "details", text: "SUSE-SLE-DESKTOP-12-SP1-2017-644,SUSE-SLE-DESKTOP-12-SP2-2017-644,SUSE-SLE-RPI-12-SP2-2017-644,SUSE-SLE-SDK-12-SP1-2017-644,SUSE-SLE-SDK-12-SP2-2017-644,SUSE-SLE-SERVER-12-SP1-2017-644,SUSE-SLE-SERVER-12-SP2-2017-644,SUSE-SLE-WE-12-SP1-2017-644,SUSE-SLE-WE-12-SP2-2017-644", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1110-1.json", }, { category: "self", summary: "URL for SUSE-SU-2017:1110-1", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20171110-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2017:1110-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html", }, { category: "self", summary: "SUSE Bug 1020940", url: "https://bugzilla.suse.com/1020940", }, { category: "self", summary: "SUSE Bug 1035686", url: "https://bugzilla.suse.com/1035686", }, { category: "self", summary: "SUSE Bug 905870", url: "https://bugzilla.suse.com/905870", }, { category: "self", summary: "SUSE Bug 905871", url: "https://bugzilla.suse.com/905871", }, { category: "self", summary: "SUSE Bug 905872", url: "https://bugzilla.suse.com/905872", }, { category: "self", summary: "SUSE Bug 922220", url: "https://bugzilla.suse.com/922220", }, { category: "self", summary: "SUSE Bug 922221", url: "https://bugzilla.suse.com/922221", }, { category: "self", summary: "SUSE Bug 922222", url: "https://bugzilla.suse.com/922222", }, { category: "self", summary: "SUSE Bug 922223", url: "https://bugzilla.suse.com/922223", }, { category: "self", summary: "SUSE Bug 927637", url: "https://bugzilla.suse.com/927637", }, { category: "self", summary: "SUSE CVE CVE-2014-8767 page", url: "https://www.suse.com/security/cve/CVE-2014-8767/", }, { category: "self", summary: "SUSE CVE CVE-2014-8768 page", url: "https://www.suse.com/security/cve/CVE-2014-8768/", }, { category: "self", summary: "SUSE CVE CVE-2014-8769 page", url: "https://www.suse.com/security/cve/CVE-2014-8769/", }, { category: "self", summary: "SUSE CVE CVE-2015-0261 page", url: "https://www.suse.com/security/cve/CVE-2015-0261/", }, { category: "self", summary: "SUSE CVE CVE-2015-2153 page", url: "https://www.suse.com/security/cve/CVE-2015-2153/", }, { category: "self", summary: "SUSE CVE CVE-2015-2154 page", url: "https://www.suse.com/security/cve/CVE-2015-2154/", }, { category: "self", summary: "SUSE CVE CVE-2015-2155 page", url: "https://www.suse.com/security/cve/CVE-2015-2155/", }, { category: "self", summary: "SUSE CVE CVE-2015-3138 page", url: "https://www.suse.com/security/cve/CVE-2015-3138/", }, { category: "self", summary: "SUSE CVE CVE-2016-7922 page", url: "https://www.suse.com/security/cve/CVE-2016-7922/", }, { category: "self", summary: "SUSE CVE CVE-2016-7923 page", url: "https://www.suse.com/security/cve/CVE-2016-7923/", }, { category: "self", summary: "SUSE CVE CVE-2016-7924 page", url: "https://www.suse.com/security/cve/CVE-2016-7924/", }, { category: "self", summary: "SUSE CVE CVE-2016-7925 page", url: "https://www.suse.com/security/cve/CVE-2016-7925/", }, { category: "self", summary: "SUSE CVE CVE-2016-7926 page", url: "https://www.suse.com/security/cve/CVE-2016-7926/", }, { category: "self", summary: "SUSE CVE CVE-2016-7927 page", url: "https://www.suse.com/security/cve/CVE-2016-7927/", }, { category: "self", summary: "SUSE CVE CVE-2016-7928 page", url: "https://www.suse.com/security/cve/CVE-2016-7928/", }, { category: "self", summary: "SUSE CVE CVE-2016-7929 page", url: "https://www.suse.com/security/cve/CVE-2016-7929/", }, { category: "self", summary: "SUSE CVE CVE-2016-7930 page", url: "https://www.suse.com/security/cve/CVE-2016-7930/", }, { category: "self", summary: "SUSE CVE CVE-2016-7931 page", url: "https://www.suse.com/security/cve/CVE-2016-7931/", }, { category: "self", summary: "SUSE CVE CVE-2016-7932 page", url: "https://www.suse.com/security/cve/CVE-2016-7932/", }, { category: "self", summary: "SUSE CVE CVE-2016-7933 page", url: "https://www.suse.com/security/cve/CVE-2016-7933/", }, { category: "self", summary: "SUSE CVE CVE-2016-7934 page", url: "https://www.suse.com/security/cve/CVE-2016-7934/", }, { category: "self", summary: "SUSE CVE CVE-2016-7935 page", url: "https://www.suse.com/security/cve/CVE-2016-7935/", }, { category: "self", summary: "SUSE CVE CVE-2016-7936 page", url: "https://www.suse.com/security/cve/CVE-2016-7936/", }, { category: "self", summary: "SUSE CVE CVE-2016-7937 page", url: "https://www.suse.com/security/cve/CVE-2016-7937/", }, { category: "self", summary: "SUSE CVE CVE-2016-7938 page", url: "https://www.suse.com/security/cve/CVE-2016-7938/", }, { category: "self", summary: "SUSE CVE CVE-2016-7939 page", url: "https://www.suse.com/security/cve/CVE-2016-7939/", }, { category: "self", summary: "SUSE CVE CVE-2016-7940 page", url: "https://www.suse.com/security/cve/CVE-2016-7940/", }, { category: "self", summary: "SUSE CVE CVE-2016-7973 page", url: "https://www.suse.com/security/cve/CVE-2016-7973/", }, { category: "self", summary: "SUSE CVE CVE-2016-7974 page", url: "https://www.suse.com/security/cve/CVE-2016-7974/", }, { category: "self", summary: "SUSE CVE CVE-2016-7975 page", url: "https://www.suse.com/security/cve/CVE-2016-7975/", }, { category: "self", summary: "SUSE CVE CVE-2016-7983 page", url: "https://www.suse.com/security/cve/CVE-2016-7983/", }, { category: "self", summary: "SUSE CVE CVE-2016-7984 page", url: "https://www.suse.com/security/cve/CVE-2016-7984/", }, { category: "self", summary: "SUSE CVE CVE-2016-7985 page", url: "https://www.suse.com/security/cve/CVE-2016-7985/", }, { category: "self", summary: "SUSE CVE CVE-2016-7986 page", url: "https://www.suse.com/security/cve/CVE-2016-7986/", }, { category: "self", summary: "SUSE CVE CVE-2016-7992 page", url: "https://www.suse.com/security/cve/CVE-2016-7992/", }, { category: "self", summary: "SUSE CVE CVE-2016-7993 page", url: "https://www.suse.com/security/cve/CVE-2016-7993/", }, { category: "self", summary: "SUSE CVE CVE-2016-8574 page", url: "https://www.suse.com/security/cve/CVE-2016-8574/", }, { category: "self", summary: "SUSE CVE CVE-2016-8575 page", url: "https://www.suse.com/security/cve/CVE-2016-8575/", }, { category: "self", summary: "SUSE CVE CVE-2017-5202 page", url: "https://www.suse.com/security/cve/CVE-2017-5202/", }, { category: "self", summary: "SUSE CVE CVE-2017-5203 page", url: "https://www.suse.com/security/cve/CVE-2017-5203/", }, { category: "self", summary: "SUSE CVE CVE-2017-5204 page", url: "https://www.suse.com/security/cve/CVE-2017-5204/", }, { category: "self", summary: "SUSE CVE CVE-2017-5205 page", url: "https://www.suse.com/security/cve/CVE-2017-5205/", }, { category: "self", summary: "SUSE CVE CVE-2017-5341 page", url: "https://www.suse.com/security/cve/CVE-2017-5341/", }, { category: "self", summary: "SUSE CVE CVE-2017-5342 page", url: "https://www.suse.com/security/cve/CVE-2017-5342/", }, { category: "self", summary: "SUSE CVE CVE-2017-5482 page", url: "https://www.suse.com/security/cve/CVE-2017-5482/", }, { category: "self", summary: "SUSE CVE CVE-2017-5483 page", url: "https://www.suse.com/security/cve/CVE-2017-5483/", }, { category: "self", summary: "SUSE CVE CVE-2017-5484 page", url: "https://www.suse.com/security/cve/CVE-2017-5484/", }, { category: "self", summary: "SUSE CVE CVE-2017-5485 page", url: "https://www.suse.com/security/cve/CVE-2017-5485/", }, { category: "self", summary: "SUSE CVE CVE-2017-5486 page", url: "https://www.suse.com/security/cve/CVE-2017-5486/", }, ], title: "Security update for tcpdump, libpcap", tracking: { current_release_date: "2017-04-26T15:31:46Z", generator: { date: "2017-04-26T15:31:46Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2017:1110-1", initial_release_date: "2017-04-26T15:31:46Z", revision_history: [ { date: "2017-04-26T15:31:46Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "libpcap1-1.8.1-9.1.aarch64", product: { name: "libpcap1-1.8.1-9.1.aarch64", product_id: "libpcap1-1.8.1-9.1.aarch64", }, }, { category: "product_version", name: "tcpdump-4.9.0-13.1.aarch64", product: { name: "tcpdump-4.9.0-13.1.aarch64", product_id: "tcpdump-4.9.0-13.1.aarch64", }, }, { category: "product_version", name: "libpcap-devel-1.8.1-9.1.aarch64", product: { name: "libpcap-devel-1.8.1-9.1.aarch64", product_id: "libpcap-devel-1.8.1-9.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "libpcap-devel-1.8.1-9.1.ppc64le", product: { name: "libpcap-devel-1.8.1-9.1.ppc64le", product_id: "libpcap-devel-1.8.1-9.1.ppc64le", }, }, { category: "product_version", name: "libpcap1-1.8.1-9.1.ppc64le", product: { name: "libpcap1-1.8.1-9.1.ppc64le", product_id: "libpcap1-1.8.1-9.1.ppc64le", }, }, { category: "product_version", name: "tcpdump-4.9.0-13.1.ppc64le", product: { name: "tcpdump-4.9.0-13.1.ppc64le", product_id: "tcpdump-4.9.0-13.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "libpcap-devel-1.8.1-9.1.s390x", product: { name: "libpcap-devel-1.8.1-9.1.s390x", product_id: "libpcap-devel-1.8.1-9.1.s390x", }, }, { category: "product_version", name: "libpcap1-1.8.1-9.1.s390x", product: { name: "libpcap1-1.8.1-9.1.s390x", product_id: "libpcap1-1.8.1-9.1.s390x", }, }, { category: "product_version", name: "tcpdump-4.9.0-13.1.s390x", product: { name: "tcpdump-4.9.0-13.1.s390x", product_id: "tcpdump-4.9.0-13.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "libpcap1-1.8.1-9.1.x86_64", product: { name: "libpcap1-1.8.1-9.1.x86_64", product_id: "libpcap1-1.8.1-9.1.x86_64", }, }, { category: "product_version", name: "libpcap1-32bit-1.8.1-9.1.x86_64", product: { name: "libpcap1-32bit-1.8.1-9.1.x86_64", product_id: "libpcap1-32bit-1.8.1-9.1.x86_64", }, }, { category: "product_version", name: "tcpdump-4.9.0-13.1.x86_64", product: { name: "tcpdump-4.9.0-13.1.x86_64", product_id: "tcpdump-4.9.0-13.1.x86_64", }, }, { category: "product_version", name: "libpcap-devel-1.8.1-9.1.x86_64", product: { name: "libpcap-devel-1.8.1-9.1.x86_64", product_id: "libpcap-devel-1.8.1-9.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 12 SP1", product: { name: "SUSE Linux Enterprise Desktop 12 SP1", product_id: "SUSE Linux Enterprise Desktop 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sled:12:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Desktop 12 SP2", product: { name: "SUSE Linux Enterprise Desktop 12 SP2", product_id: "SUSE Linux Enterprise Desktop 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sled:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product: { name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sles:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Software Development Kit 12 SP1", product: { name: "SUSE Linux Enterprise Software Development Kit 12 SP1", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sle-sdk:12:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Software Development Kit 12 SP2", product: { name: "SUSE Linux Enterprise Software Development Kit 12 SP2", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sle-sdk:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP1", product: { name: "SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sles:12:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP2", product: { name: "SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sles:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Workstation Extension 12 SP1", product: { name: "SUSE Linux Enterprise Workstation Extension 12 SP1", product_id: "SUSE Linux Enterprise Workstation Extension 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sle-we:12:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Workstation Extension 12 SP2", product: { name: "SUSE Linux Enterprise Workstation Extension 12 SP2", product_id: "SUSE Linux Enterprise Workstation Extension 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sle-we:12:sp2", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", product_id: "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap1-32bit-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", product_id: "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-32bit-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", product_id: "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", }, product_reference: "tcpdump-4.9.0-13.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", product_id: "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-32bit-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", product_id: "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-32bit-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", product_id: "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", }, product_reference: "tcpdump-4.9.0-13.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", }, product_reference: "libpcap1-1.8.1-9.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", }, product_reference: "tcpdump-4.9.0-13.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap-devel-1.8.1-9.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", }, product_reference: "libpcap-devel-1.8.1-9.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap-devel-1.8.1-9.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", }, product_reference: "libpcap-devel-1.8.1-9.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap-devel-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", }, product_reference: "libpcap-devel-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap-devel-1.8.1-9.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", }, product_reference: "libpcap-devel-1.8.1-9.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap-devel-1.8.1-9.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", }, product_reference: "libpcap-devel-1.8.1-9.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap-devel-1.8.1-9.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", }, product_reference: "libpcap-devel-1.8.1-9.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap-devel-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", }, product_reference: "libpcap-devel-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", }, product_reference: "libpcap1-1.8.1-9.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.s390x as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", }, product_reference: "libpcap1-1.8.1-9.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", }, product_reference: "tcpdump-4.9.0-13.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.s390x as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", }, product_reference: "tcpdump-4.9.0-13.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", }, product_reference: "tcpdump-4.9.0-13.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", }, product_reference: "libpcap1-1.8.1-9.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", }, product_reference: "libpcap1-1.8.1-9.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", }, product_reference: "tcpdump-4.9.0-13.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", }, product_reference: "tcpdump-4.9.0-13.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", }, product_reference: "tcpdump-4.9.0-13.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", }, product_reference: "libpcap1-1.8.1-9.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", }, product_reference: "libpcap1-1.8.1-9.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.s390x as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", }, product_reference: "libpcap1-1.8.1-9.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", }, product_reference: "tcpdump-4.9.0-13.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", }, product_reference: "tcpdump-4.9.0-13.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.s390x as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", }, product_reference: "tcpdump-4.9.0-13.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", }, product_reference: "tcpdump-4.9.0-13.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", }, product_reference: "libpcap1-1.8.1-9.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", }, product_reference: "libpcap1-1.8.1-9.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", }, product_reference: "libpcap1-1.8.1-9.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", }, product_reference: "tcpdump-4.9.0-13.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", }, product_reference: "tcpdump-4.9.0-13.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", }, product_reference: "tcpdump-4.9.0-13.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "tcpdump-4.9.0-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", }, product_reference: "tcpdump-4.9.0-13.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "libpcap1-32bit-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1", product_id: "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-32bit-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12 SP1", }, { category: "default_component_of", full_product_name: { name: "libpcap1-32bit-1.8.1-9.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP2", product_id: "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", }, product_reference: "libpcap1-32bit-1.8.1-9.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12 SP2", }, ], }, vulnerabilities: [ { cve: "CVE-2014-8767", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8767", }, ], notes: [ { category: "general", text: "Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8767", url: "https://www.suse.com/security/cve/CVE-2014-8767", }, { category: "external", summary: "SUSE Bug 905870 for CVE-2014-8767", url: "https://bugzilla.suse.com/905870", }, { category: "external", summary: "SUSE Bug 905871 for CVE-2014-8767", url: "https://bugzilla.suse.com/905871", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2014-8767", }, { cve: "CVE-2014-8768", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8768", }, ], notes: [ { category: "general", text: "Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8768", url: "https://www.suse.com/security/cve/CVE-2014-8768", }, { category: "external", summary: "SUSE Bug 905871 for CVE-2014-8768", url: "https://bugzilla.suse.com/905871", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2014-8768", }, { cve: "CVE-2014-8769", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-8769", }, ], notes: [ { category: "general", text: "tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-8769", url: "https://www.suse.com/security/cve/CVE-2014-8769", }, { category: "external", summary: "SUSE Bug 905871 for CVE-2014-8769", url: "https://bugzilla.suse.com/905871", }, { category: "external", summary: "SUSE Bug 905872 for CVE-2014-8769", url: "https://bugzilla.suse.com/905872", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2014-8769", }, { cve: "CVE-2015-0261", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-0261", }, ], notes: [ { category: "general", text: "Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-0261", url: "https://www.suse.com/security/cve/CVE-2015-0261", }, { category: "external", summary: "SUSE Bug 922220 for CVE-2015-0261", url: "https://bugzilla.suse.com/922220", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2015-0261", }, { cve: "CVE-2015-2153", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-2153", }, ], notes: [ { category: "general", text: "The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-2153", url: "https://www.suse.com/security/cve/CVE-2015-2153", }, { category: "external", summary: "SUSE Bug 922221 for CVE-2015-2153", url: "https://bugzilla.suse.com/922221", }, { category: "external", summary: "SUSE Bug 922222 for CVE-2015-2153", url: "https://bugzilla.suse.com/922222", }, { category: "external", summary: "SUSE Bug 922223 for CVE-2015-2153", url: "https://bugzilla.suse.com/922223", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2015-2153", }, { cve: "CVE-2015-2154", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-2154", }, ], notes: [ { category: "general", text: "The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-2154", url: "https://www.suse.com/security/cve/CVE-2015-2154", }, { category: "external", summary: "SUSE Bug 922222 for CVE-2015-2154", url: "https://bugzilla.suse.com/922222", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2015-2154", }, { cve: "CVE-2015-2155", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-2155", }, ], notes: [ { category: "general", text: "The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-2155", url: "https://www.suse.com/security/cve/CVE-2015-2155", }, { category: "external", summary: "SUSE Bug 922220 for CVE-2015-2155", url: "https://bugzilla.suse.com/922220", }, { category: "external", summary: "SUSE Bug 922221 for CVE-2015-2155", url: "https://bugzilla.suse.com/922221", }, { category: "external", summary: "SUSE Bug 922222 for CVE-2015-2155", url: "https://bugzilla.suse.com/922222", }, { category: "external", summary: "SUSE Bug 922223 for CVE-2015-2155", url: "https://bugzilla.suse.com/922223", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2015-2155", }, { cve: "CVE-2015-3138", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3138", }, ], notes: [ { category: "general", text: "print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3138", url: "https://www.suse.com/security/cve/CVE-2015-3138", }, { category: "external", summary: "SUSE Bug 927637 for CVE-2015-3138", url: "https://bugzilla.suse.com/927637", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2015-3138", }, { cve: "CVE-2016-7922", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7922", }, ], notes: [ { category: "general", text: "The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7922", url: "https://www.suse.com/security/cve/CVE-2016-7922", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7922", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7922", }, { cve: "CVE-2016-7923", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7923", }, ], notes: [ { category: "general", text: "The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7923", url: "https://www.suse.com/security/cve/CVE-2016-7923", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7923", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7923", }, { cve: "CVE-2016-7924", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7924", }, ], notes: [ { category: "general", text: "The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7924", url: "https://www.suse.com/security/cve/CVE-2016-7924", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7924", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7924", }, { cve: "CVE-2016-7925", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7925", }, ], notes: [ { category: "general", text: "The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7925", url: "https://www.suse.com/security/cve/CVE-2016-7925", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7925", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7925", }, { cve: "CVE-2016-7926", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7926", }, ], notes: [ { category: "general", text: "The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7926", url: "https://www.suse.com/security/cve/CVE-2016-7926", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7926", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7926", }, { cve: "CVE-2016-7927", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7927", }, ], notes: [ { category: "general", text: "The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7927", url: "https://www.suse.com/security/cve/CVE-2016-7927", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7927", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7927", }, { cve: "CVE-2016-7928", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7928", }, ], notes: [ { category: "general", text: "The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7928", url: "https://www.suse.com/security/cve/CVE-2016-7928", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7928", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7928", }, { cve: "CVE-2016-7929", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7929", }, ], notes: [ { category: "general", text: "The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7929", url: "https://www.suse.com/security/cve/CVE-2016-7929", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7929", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7929", }, { cve: "CVE-2016-7930", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7930", }, ], notes: [ { category: "general", text: "The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7930", url: "https://www.suse.com/security/cve/CVE-2016-7930", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7930", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7930", }, { cve: "CVE-2016-7931", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7931", }, ], notes: [ { category: "general", text: "The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7931", url: "https://www.suse.com/security/cve/CVE-2016-7931", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7931", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7931", }, { cve: "CVE-2016-7932", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7932", }, ], notes: [ { category: "general", text: "The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7932", url: "https://www.suse.com/security/cve/CVE-2016-7932", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7932", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7932", }, { cve: "CVE-2016-7933", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7933", }, ], notes: [ { category: "general", text: "The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7933", url: "https://www.suse.com/security/cve/CVE-2016-7933", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7933", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7933", }, { cve: "CVE-2016-7934", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7934", }, ], notes: [ { category: "general", text: "The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7934", url: "https://www.suse.com/security/cve/CVE-2016-7934", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7934", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7934", }, { cve: "CVE-2016-7935", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7935", }, ], notes: [ { category: "general", text: "The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7935", url: "https://www.suse.com/security/cve/CVE-2016-7935", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7935", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7935", }, { cve: "CVE-2016-7936", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7936", }, ], notes: [ { category: "general", text: "The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7936", url: "https://www.suse.com/security/cve/CVE-2016-7936", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7936", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7936", }, { cve: "CVE-2016-7937", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7937", }, ], notes: [ { category: "general", text: "The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7937", url: "https://www.suse.com/security/cve/CVE-2016-7937", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7937", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7937", }, { cve: "CVE-2016-7938", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7938", }, ], notes: [ { category: "general", text: "The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7938", url: "https://www.suse.com/security/cve/CVE-2016-7938", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7938", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7938", }, { cve: "CVE-2016-7939", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7939", }, ], notes: [ { category: "general", text: "The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7939", url: "https://www.suse.com/security/cve/CVE-2016-7939", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7939", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7939", }, { cve: "CVE-2016-7940", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7940", }, ], notes: [ { category: "general", text: "The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7940", url: "https://www.suse.com/security/cve/CVE-2016-7940", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7940", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7940", }, { cve: "CVE-2016-7973", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7973", }, ], notes: [ { category: "general", text: "The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7973", url: "https://www.suse.com/security/cve/CVE-2016-7973", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7973", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7973", }, { cve: "CVE-2016-7974", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7974", }, ], notes: [ { category: "general", text: "The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7974", url: "https://www.suse.com/security/cve/CVE-2016-7974", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7974", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7974", }, { cve: "CVE-2016-7975", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7975", }, ], notes: [ { category: "general", text: "The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7975", url: "https://www.suse.com/security/cve/CVE-2016-7975", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7975", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7975", }, { cve: "CVE-2016-7983", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7983", }, ], notes: [ { category: "general", text: "The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7983", url: "https://www.suse.com/security/cve/CVE-2016-7983", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7983", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7983", }, { cve: "CVE-2016-7984", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7984", }, ], notes: [ { category: "general", text: "The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7984", url: "https://www.suse.com/security/cve/CVE-2016-7984", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7984", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7984", }, { cve: "CVE-2016-7985", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7985", }, ], notes: [ { category: "general", text: "The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7985", url: "https://www.suse.com/security/cve/CVE-2016-7985", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7985", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7985", }, { cve: "CVE-2016-7986", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7986", }, ], notes: [ { category: "general", text: "The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7986", url: "https://www.suse.com/security/cve/CVE-2016-7986", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7986", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7986", }, { cve: "CVE-2016-7992", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7992", }, ], notes: [ { category: "general", text: "The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip_if_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7992", url: "https://www.suse.com/security/cve/CVE-2016-7992", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7992", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7992", }, { cve: "CVE-2016-7993", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7993", }, ], notes: [ { category: "general", text: "A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM).", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7993", url: "https://www.suse.com/security/cve/CVE-2016-7993", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-7993", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-7993", }, { cve: "CVE-2016-8574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-8574", }, ], notes: [ { category: "general", text: "The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-8574", url: "https://www.suse.com/security/cve/CVE-2016-8574", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-8574", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-8574", }, { cve: "CVE-2016-8575", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-8575", }, ], notes: [ { category: "general", text: "The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-8575", url: "https://www.suse.com/security/cve/CVE-2016-8575", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2016-8575", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2016-8575", }, { cve: "CVE-2017-5202", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5202", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5202", url: "https://www.suse.com/security/cve/CVE-2017-5202", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5202", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5202", }, { cve: "CVE-2017-5203", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5203", }, ], notes: [ { category: "general", text: "The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5203", url: "https://www.suse.com/security/cve/CVE-2017-5203", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5203", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5203", }, { cve: "CVE-2017-5204", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5204", }, ], notes: [ { category: "general", text: "The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5204", url: "https://www.suse.com/security/cve/CVE-2017-5204", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5204", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5204", }, { cve: "CVE-2017-5205", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5205", }, ], notes: [ { category: "general", text: "The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5205", url: "https://www.suse.com/security/cve/CVE-2017-5205", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5205", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5205", }, { cve: "CVE-2017-5341", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5341", }, ], notes: [ { category: "general", text: "The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5341", url: "https://www.suse.com/security/cve/CVE-2017-5341", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5341", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5341", }, { cve: "CVE-2017-5342", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5342", }, ], notes: [ { category: "general", text: "In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5342", url: "https://www.suse.com/security/cve/CVE-2017-5342", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5342", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5342", }, { cve: "CVE-2017-5482", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5482", }, ], notes: [ { category: "general", text: "The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5482", url: "https://www.suse.com/security/cve/CVE-2017-5482", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5482", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5482", }, { cve: "CVE-2017-5483", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5483", }, ], notes: [ { category: "general", text: "The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5483", url: "https://www.suse.com/security/cve/CVE-2017-5483", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5483", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5483", }, { cve: "CVE-2017-5484", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5484", }, ], notes: [ { category: "general", text: "The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5484", url: "https://www.suse.com/security/cve/CVE-2017-5484", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5484", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5484", }, { cve: "CVE-2017-5485", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5485", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5485", url: "https://www.suse.com/security/cve/CVE-2017-5485", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5485", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5485", }, { cve: "CVE-2017-5486", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5486", }, ], notes: [ { category: "general", text: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5486", url: "https://www.suse.com/security/cve/CVE-2017-5486", }, { category: "external", summary: "SUSE Bug 1020940 for CVE-2017-5486", url: "https://bugzilla.suse.com/1020940", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpcap1-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.0-13.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:libpcap-devel-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP1:libpcap1-32bit-1.8.1-9.1.x86_64", "SUSE Linux Enterprise Workstation Extension 12 SP2:libpcap1-32bit-1.8.1-9.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-26T15:31:46Z", details: "moderate", }, ], title: "CVE-2017-5486", }, ], }
fkie_cve-2017-5202
Vulnerability from fkie_nvd
Published
2017-01-28 01:59
Modified
2024-11-21 03:27
Severity ?
Summary
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
tcpdump | tcpdump | * | |
debian | debian_linux | 8.0 | |
debian | debian_linux | 9.0 | |
redhat | enterprise_linux_desktop | 7.0 | |
redhat | enterprise_linux_server | 7.0 | |
redhat | enterprise_linux_server_aus | 7.4 | |
redhat | enterprise_linux_server_aus | 7.6 | |
redhat | enterprise_linux_server_eus | 7.4 | |
redhat | enterprise_linux_server_eus | 7.5 | |
redhat | enterprise_linux_server_eus | 7.6 | |
redhat | enterprise_linux_server_tus | 7.6 | |
redhat | enterprise_linux_workstation | 7.0 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*", matchCriteriaId: "F796C610-BB37-48CD-8B65-DA81617A5449", versionEndExcluding: "4.9.0", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", matchCriteriaId: "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", matchCriteriaId: "DEECE5FC-CACF-4496-A3E7-164736409252", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", matchCriteriaId: "33C068A4-3780-4EAB-A937-6082DF847564", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", matchCriteriaId: "51EF4996-72F4-4FA4-814F-F5991E7A8318", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*", matchCriteriaId: "D99A687E-EAE6-417E-A88E-D0082BC194CD", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*", matchCriteriaId: "B353CE99-D57C-465B-AAB0-73EF581127D1", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*", matchCriteriaId: "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*", matchCriteriaId: "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*", matchCriteriaId: "BF77CDCF-B9C9-427D-B2BF-36650FB2148C", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*", matchCriteriaId: "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", matchCriteriaId: "825ECE2D-E232-46E0-A047-074B34DB1E97", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", }, { lang: "es", value: "El analizador ISO CLNS en tcpdump en versiones anteriores a 4.9.0 tiene un desbordamiento de búfer en print-isoclns.c:clnp_print().", }, ], id: "CVE-2017-5202", lastModified: "2024-11-21T03:27:15.903", metrics: { cvssMetricV2: [ { acInsufInfo: true, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 7.5, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV30: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, exploitabilityScore: 3.9, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2017-01-28T01:59:01.047", references: [ { source: "cve@mitre.org", tags: [ "Third Party Advisory", ], url: "http://www.debian.org/security/2017/dsa-3775", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/95852", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1037755", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", ], url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", ], url: "https://security.gentoo.org/glsa/201702-30", }, { source: "cve@mitre.org", url: "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "http://www.debian.org/security/2017/dsa-3775", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/95852", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1037755", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://security.gentoo.org/glsa/201702-30", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-119", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
ghsa-mx6v-r6wg-fv32
Vulnerability from github
Published
2022-05-14 01:19
Modified
2022-05-14 01:19
Severity ?
Details
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
{ affected: [], aliases: [ "CVE-2017-5202", ], database_specific: { cwe_ids: [ "CWE-119", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2017-01-28T01:59:00Z", severity: "CRITICAL", }, details: "The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().", id: "GHSA-mx6v-r6wg-fv32", modified: "2022-05-14T01:19:07Z", published: "2022-05-14T01:19:07Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-5202", }, { type: "WEB", url: "https://access.redhat.com/errata/RHSA-2017:1871", }, { type: "WEB", url: "https://security.gentoo.org/glsa/201702-30", }, { type: "WEB", url: "https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1494526.html", }, { type: "WEB", url: "http://www.debian.org/security/2017/dsa-3775", }, { type: "WEB", url: "http://www.securityfocus.com/bid/95852", }, { type: "WEB", url: "http://www.securitytracker.com/id/1037755", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", type: "CVSS_V3", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.