Red Hat Security AdvisoryRHSA-2019:3976
tcpdump security update
Released 2019-11-26 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) tcpdump-14:4.9.2-4.el7_7.1
- Red Hat Enterprise Linux ComputeNode (v. 7) tcpdump-14:4.9.2-4.el7_7.1
- Red Hat Enterprise Linux Server (v. 7) tcpdump-14:4.9.2-4.el7_7.1
- Red Hat Enterprise Linux Workstation (v. 7) tcpdump-14:4.9.2-4.el7_7.1
Fixes 1 record
Priority LOW 30
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02586 · Published 2018-11-25 · Fixed CWE-125
