{"redhatcve": [{"lastseen": "2022-01-21T00:07:04", "description": "Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.\n#### Mitigation\n\nWhen invoked with the "-w" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture. \n\n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-02-03T15:52:23", "type": "redhatcve", "title": "CVE-2016-7931", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7931"], "modified": "2022-01-20T21:53:15", "id": "RH:CVE-2016-7931", "href": "https://access.redhat.com/security/cve/cve-2016-7931", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "prion": [{"lastseen": "2023-11-22T03:39:48", "description": "The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "source": "nvd@nist.gov", "type": "Primary", "impactScore": 5.9}, "published": "2017-01-28T01:59:00", "type": "prion", "title": "Buffer overflow", "bulletinFamily": "NVD", "cvss2": {"baseSeverity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "source": "nvd@nist.gov", "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "type": "Primary", "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7931"], "modified": "2023-11-07T02:35:00", "id": "PRION:CVE-2016-7931", "href": "https://www.prio-n.com/kb/vulnerability/CVE-2016-7931", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "ubuntucve": [{"lastseen": "2023-12-03T14:45:58", "description": "The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-mpls.c:mpls_print().", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-01-27T00:00:00", "type": "ubuntucve", "title": "CVE-2016-7931", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7931"], "modified": "2017-01-27T00:00:00", "id": "UB:CVE-2016-7931", "href": "https://ubuntu.com/security/CVE-2016-7931", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "cve": [{"lastseen": "2023-12-03T14:49:04", "description": "The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-01-28T01:59:00", "type": "cve", "title": "CVE-2016-7931", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7931"], "modified": "2023-11-07T02:35:00", "cpe": ["cpe:/a:tcpdump:tcpdump:4.8.1"], "id": "CVE-2016-7931", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7931", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:tcpdump:tcpdump:4.8.1:*:*:*:*:*:*:*"]}], "debiancve": [{"lastseen": "2023-12-03T15:24:57", "description": "The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-01-28T01:59:00", "type": "debiancve", "title": "CVE-2016-7931", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7931"], "modified": "2017-01-28T01:59:00", "id": "DEBIANCVE:CVE-2016-7931", "href": "https://security-tracker.debian.org/tracker/CVE-2016-7931", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "f5": [{"lastseen": "2019-10-21T08:30:33", "description": "\nF5 Product Development has assigned ID 644904 (BIG-IP), ID 648098 (BIG-IQ), ID 644072 (Enterprise Manager), and ID 648898 (F5 iWorkflow) to this vulnerability. Additionally, [BIG-IP iHealth](<http://www.f5.com/support/support-tools/big-ip-ihealth/>) may list Heuristic H39512927 on the **Diagnostics** > **Identified** > **High** page.\n\nTo determine if your release is known to be vulnerable, the components or features that are affected by the vulnerability, and for information about releases or hotfixes that address the vulnerability, refer to the following table.\n\nProduct | Versions known to be vulnerable | Versions known to be not vulnerable | Severity | Vulnerable component or feature \n---|---|---|---|--- \nBIG-IP LTM | 13.0.0 \n12.0.0 - 12.1.2 \n11.4.0 - 11.5.5 \n11.6.0 - 11.6.1 \n11.2.1 | 13.1.0 \n13.0.1 \n12.1.3 \n11.6.2 \n11.5.6 | High | tcpdump \nBIG-IP AAM | 13.0.0 \n12.0.0 - 12.1.2 \n11.4.0 - 11.5.5 \n11.6.0 - 11.6.1 | 13.1.0 \n13.0.1 \n12.1.3 \n11.6.2 \n11.5.6 | High | tcpdump \nBIG-IP AFM | 13.0.0 \n12.0.0 - 12.1.2 \n11.4.0 - 11.5.5 \n11.6.0 - 11.6.1 | 13.1.0 \n13.0.1 \n12.1.3 \n11.6.2 \n11.5.6 | High | tcpdump \nBIG-IP Analytics | 13.0.0 \n12.0.0 - 12.1.2 \n11.4.0 - 11.5.5 \n11.6.0 - 11.6.1 \n11.2.1 | 13.1.0 \n13.0.1 \n12.1.3 \n11.6.2 \n11.5.6 | High | tcpdump \nBIG-IP APM | 13.0.0 \n12.0.0 - 12.1.2 \n11.4.0 - 11.5.5 \n11.6.0 - 11.6.1 \n11.2.1 | 13.1.0 \n13.0.1 \n12.1.3 \n11.6.2 \n11.5.6 | High | tcpdump \nBIG-IP ASM | 13.0.0 \n12.0.0 - 12.1.2 \n11.4.0 - 11.5.5 \n11.6.0 - 11.6.1 \n11.2.1 | 13.1.0 \n13.0.1 \n12.1.3 \n11.6.2 \n11.5.6 | High | tcpdump \nBIG-IP DNS | 13.0.0 \n12.0.0 - 12.1.2 | 13.1.0 \n13.0.1 \n12.1.3 | High | tcpdump \nBIG-IP Edge Gateway | 11.2.1 | None | High | tcpdump \nBIG-IP GTM | 11.4.0 - 11.5.5 \n11.6.0 - 11.6.1 \n11.2.1 | 11.6.2 \n11.5.6 | High | tcpdump \nBIG-IP Link Controller | 13.0.0 \n12.0.0 - 12.1.2 \n11.4.0 - 11.5.5 \n11.6.0 - 11.6.1 \n11.2.1 | 13.1.0 \n13.0.1 \n12.1.3 \n11.6.2 \n11.5.6 | High | tcpdump \nBIG-IP PEM | 13.0.0 \n12.0.0 - 12.1.2 \n11.4.0 - 11.5.5 \n11.6.0 - 11.6.1 | 13.1.0 \n13.0.1 \n12.1.3 \n11.6.2 \n11.5.6 | High | tcpdump \nBIG-IP PSM | 11.4.0 - 11.4.1 | None | High | tcpdump \nBIG-IP WebAccelerator | 11.2.1 | None | High | tcpdump \nBIG-IP WebSafe | 13.0.0 \n12.0.0 - 12.1.2 \n11.6.0 - 11.6.1 | 13.1.0 \n13.0.1 \n12.1.3 \n11.6.2 | High | tcpdump \nARX | None | 6.2.0 - 6.4.0 | Not vulnerable | None \nEnterprise Manager | 3.1.1 | None | Medium | tcpdump \nBIG-IQ Cloud | 4.0.0 - 4.5.0 | None | High | tcpdump \nBIG-IQ Device | 4.2.0 - 4.5.0 | None | High | tcpdump \nBIG-IQ Security | 4.0.0 - 4.5.0 | None | High | tcpdump \nBIG-IQ ADC | 4.5.0 | None | High | tcpdump \nBIG-IQ Centralized Management | 5.0.0 - 5.3.0 \n4.6.0 | 5.4.0 | High | tcpdump \nBIG-IQ Cloud and Orchestration | 1.0.0 | None | High | tcpdump \nF5 iWorkflow | 2.0.0 - 2.1.0 | None | High | tcpdump \nLineRate | None | 2.5.0 - 2.6.2 | Not vulnerable | None \nTraffix SDC | None | 5.0.0 - 5.1.0 \n4.0.0 - 4.4.0 | Not vulnerable | None\n\nIf you are running a version listed in the **Versions known to be vulnerable** column, you can eliminate this vulnerability by upgrading to a version listed in the **Versions known to be not vulnerable** column. If the table lists only an older version than what you are currently running, or does not list a non-vulnerable version, then no upgrade candidate currently exists.\n\nTo determine the necessary upgrade path for your BIG-IQ system, you should understand the BIG-IQ product offering name changes. For more information, refer to [K21232150: Considerations for upgrading BIG-IQ or F5 iWorkflow systems](<https://support.f5.com/csp/article/K21232150>).\n\nMitigation\n\nTo mitigate this vulnerability, you can invoke the **-w** option in your **tcpdump **syntax to write raw packets to a **pcap **file for offline examination. For more information, refer to [K411: Overview of packet tracing with the tcpdump utility](<https://support.f5.com/csp/article/K411>).\n\n**Impact of action:** Depending on the method used to gather the packet capture and the amount of active traffic at the time the capture is taken, the capture file size can increase quickly. For more information, refer to [K6546: Recommended methods and limitations for running tcpdump on a BIG-IP system](<https://support.f5.com/csp/article/K6546>).\n\n * [K9970: Subscribing to email notifications regarding F5 products](<https://support.f5.com/csp/article/K9970>)\n * [K9957: Creating a custom RSS feed to view new and updated documents](<https://support.f5.com/csp/article/K9957>)\n * [K4602: Overview of the F5 security vulnerability response policy](<https://support.f5.com/csp/article/K4602>)\n * [K4918: Overview of the F5 critical issue hotfix policy](<https://support.f5.com/csp/article/K4918>)\n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-03-07T22:35:00", "type": "f5", "title": "tcpdump vulnerabilities CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, and CVE-2016-7933", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7933"], "modified": "2018-04-16T19:32:00", "id": "F5:K39512927", "href": "https://support.f5.com/csp/article/K39512927", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "nessus": [{"lastseen": "2023-12-02T15:39:47", "description": "CVE-2016-7928 The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().\n\nCVE-2016-7929 The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().\n\nCVE-2016-7930 The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().\n\nCVE-2016-7931 The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().\n\nCVE-2016-7933 The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().", "cvss3": {}, "published": "2017-11-01T00:00:00", "type": "nessus", "title": "F5 Networks BIG-IP : tcpdump vulnerabilities (K39512927)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7933"], "modified": "2019-01-04T00:00:00", "cpe": ["cpe:/a:f5:big-ip_access_policy_manager", "cpe:/a:f5:big-ip_advanced_firewall_manager", "cpe:/a:f5:big-ip_application_acceleration_manager", "cpe:/a:f5:big-ip_application_security_manager", "cpe:/a:f5:big-ip_application_visibility_and_reporting", "cpe:/a:f5:big-ip_global_traffic_manager", "cpe:/a:f5:big-ip_link_controller", "cpe:/a:f5:big-ip_local_traffic_manager", "cpe:/a:f5:big-ip_policy_enforcement_manager", "cpe:/a:f5:big-ip_webaccelerator", "cpe:/h:f5:big-ip", "cpe:/h:f5:big-ip_protocol_security_manager"], "id": "F5_BIGIP_SOL39512927.NASL", "href": "https://www.tenable.com/plugins/nessus/104306", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from F5 Networks BIG-IP Solution K39512927.\n#\n# The text description of this plugin is (C) F5 Networks.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(104306);\n script_version(\"3.10\");\n script_cvs_date(\"Date: 2019/01/04 10:03:41\");\n\n script_cve_id(\"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7933\");\n\n script_name(english:\"F5 Networks BIG-IP : tcpdump vulnerabilities (K39512927)\");\n script_summary(english:\"Checks the BIG-IP version.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote device is missing a vendor-supplied security patch.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"CVE-2016-7928 The IPComp parser in tcpdump before 4.9.0 has a buffer\noverflow in print-ipcomp.c:ipcomp_print().\n\nCVE-2016-7929 The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has\na buffer overflow in print-juniper.c:juniper_parse_header().\n\nCVE-2016-7930 The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer\noverflow in print-llc.c:llc_print().\n\nCVE-2016-7931 The MPLS parser in tcpdump before 4.9.0 has a buffer\noverflow in print-mpls.c:mpls_print().\n\nCVE-2016-7933 The PPP parser in tcpdump before 4.9.0 has a buffer\noverflow in print-ppp.c:ppp_hdlc_if_print().\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://support.f5.com/csp/article/K39512927\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade to one of the non-vulnerable versions listed in the F5\nSolution K39512927.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"potential_vulnerability\", value:\"true\");\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_access_policy_manager\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_advanced_firewall_manager\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_application_acceleration_manager\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_application_security_manager\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_application_visibility_and_reporting\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_global_traffic_manager\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_link_controller\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_local_traffic_manager\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_policy_enforcement_manager\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:f5:big-ip_webaccelerator\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/h:f5:big-ip\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/h:f5:big-ip_protocol_security_manager\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/03/07\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/11/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"F5 Networks Local Security Checks\");\n\n script_dependencies(\"f5_bigip_detect.nbin\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/BIG-IP/hotfix\", \"Host/BIG-IP/modules\", \"Host/BIG-IP/version\", \"Settings/ParanoidReport\");\n\n exit(0);\n}\n\n\ninclude(\"f5_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nversion = get_kb_item(\"Host/BIG-IP/version\");\nif ( ! version ) audit(AUDIT_OS_NOT, \"F5 Networks BIG-IP\");\nif ( isnull(get_kb_item(\"Host/BIG-IP/hotfix\")) ) audit(AUDIT_KB_MISSING, \"Host/BIG-IP/hotfix\");\nif ( ! get_kb_item(\"Host/BIG-IP/modules\") ) audit(AUDIT_KB_MISSING, \"Host/BIG-IP/modules\");\n\nsol = \"K39512927\";\nvmatrix = make_array();\n\nif (report_paranoia < 2) audit(AUDIT_PARANOID);\n\n# AFM\nvmatrix[\"AFM\"] = make_array();\nvmatrix[\"AFM\"][\"affected\" ] = make_list(\"13.0.0\",\"12.0.0-12.1.2\",\"11.4.0-11.5.5\",\"11.6.0-11.6.1\");\nvmatrix[\"AFM\"][\"unaffected\"] = make_list(\"13.1.0\",\"13.0.1\",\"12.1.3\",\"11.6.2\",\"11.5.6\");\n\n# AM\nvmatrix[\"AM\"] = make_array();\nvmatrix[\"AM\"][\"affected\" ] = make_list(\"13.0.0\",\"12.0.0-12.1.2\",\"11.4.0-11.5.5\",\"11.6.0-11.6.1\");\nvmatrix[\"AM\"][\"unaffected\"] = make_list(\"13.1.0\",\"13.0.1\",\"12.1.3\",\"11.6.2\",\"11.5.6\");\n\n# APM\nvmatrix[\"APM\"] = make_array();\nvmatrix[\"APM\"][\"affected\" ] = make_list(\"13.0.0\",\"12.0.0-12.1.2\",\"11.4.0-11.5.5\",\"11.6.0-11.6.1\",\"11.2.1\");\nvmatrix[\"APM\"][\"unaffected\"] = make_list(\"13.1.0\",\"13.0.1\",\"12.1.3\",\"11.6.2\",\"11.5.6\");\n\n# ASM\nvmatrix[\"ASM\"] = make_array();\nvmatrix[\"ASM\"][\"affected\" ] = make_list(\"13.0.0\",\"12.0.0-12.1.2\",\"11.4.0-11.5.5\",\"11.6.0-11.6.1\",\"11.2.1\");\nvmatrix[\"ASM\"][\"unaffected\"] = make_list(\"13.1.0\",\"13.0.1\",\"12.1.3\",\"11.6.2\",\"11.5.6\");\n\n# AVR\nvmatrix[\"AVR\"] = make_array();\nvmatrix[\"AVR\"][\"affected\" ] = make_list(\"13.0.0\",\"12.0.0-12.1.2\",\"11.4.0-11.5.5\",\"11.6.0-11.6.1\",\"11.2.1\");\nvmatrix[\"AVR\"][\"unaffected\"] = make_list(\"13.1.0\",\"13.0.1\",\"12.1.3\",\"11.6.2\",\"11.5.6\");\n\n# GTM\nvmatrix[\"GTM\"] = make_array();\nvmatrix[\"GTM\"][\"affected\" ] = make_list(\"11.4.0-11.5.5\",\"11.6.0-11.6.1\",\"11.2.1\");\nvmatrix[\"GTM\"][\"unaffected\"] = make_list(\"11.6.2\",\"11.5.6\");\n\n# LC\nvmatrix[\"LC\"] = make_array();\nvmatrix[\"LC\"][\"affected\" ] = make_list(\"13.0.0\",\"12.0.0-12.1.2\",\"11.4.0-11.5.5\",\"11.6.0-11.6.1\",\"11.2.1\");\nvmatrix[\"LC\"][\"unaffected\"] = make_list(\"13.1.0\",\"13.0.1\",\"12.1.3\",\"11.6.2\",\"11.5.6\");\n\n# LTM\nvmatrix[\"LTM\"] = make_array();\nvmatrix[\"LTM\"][\"affected\" ] = make_list(\"13.0.0\",\"12.0.0-12.1.2\",\"11.4.0-11.5.5\",\"11.6.0-11.6.1\",\"11.2.1\");\nvmatrix[\"LTM\"][\"unaffected\"] = make_list(\"13.1.0\",\"13.0.1\",\"12.1.3\",\"11.6.2\",\"11.5.6\");\n\n# PEM\nvmatrix[\"PEM\"] = make_array();\nvmatrix[\"PEM\"][\"affected\" ] = make_list(\"13.0.0\",\"12.0.0-12.1.2\",\"11.4.0-11.5.5\",\"11.6.0-11.6.1\");\nvmatrix[\"PEM\"][\"unaffected\"] = make_list(\"13.1.0\",\"13.0.1\",\"12.1.3\",\"11.6.2\",\"11.5.6\");\n\n\nif (bigip_is_affected(vmatrix:vmatrix, sol:sol))\n{\n if (report_verbosity > 0) security_hole(port:0, extra:bigip_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = bigip_get_tested_modules();\n audit_extra = \"For BIG-IP module(s) \" + tested + \",\";\n if (tested) audit(AUDIT_INST_VER_NOT_VULN, audit_extra, version);\n else audit(AUDIT_HOST_NOT, \"running any of the affected modules\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:30:50", "description": "This update for tcpdump fixes the following issues: Security issues fixed (bsc#1020940) :\n\n - CVE-2016-7922: Corrected buffer overflow in AH parser print-ah.c:ah_print().\n\n - CVE-2016-7923: Corrected buffer overflow in ARP parser print-arp.c:arp_print().\n\n - CVE-2016-7925: Corrected buffer overflow in compressed SLIP parser print-sl.c:sl_if_print().\n\n - CVE-2016-7926: Corrected buffer overflow in the Ethernet parser print-ether.c:ethertype_print().\n\n - CVE-2016-7927: Corrected buffer overflow in the IEEE 802.11 parser print-802_11.c:ieee802_11_radio_print().\n\n - CVE-2016-7928: Corrected buffer overflow in the IPComp parser print-ipcomp.c:ipcomp_print().\n\n - CVE-2016-7931: Corrected buffer overflow in the MPLS parser print-mpls.c:mpls_print().\n\n - CVE-2016-7936: Corrected buffer overflow in the UDP parser print-udp.c:udp_print().\n\n - CVE-2016-7934,CVE-2016-7935,CVE-2016-7937: Corrected segmentation faults in function udp_print().\n\n - CVE-2016-7939: Corrected buffer overflows in GRE parser print-gre.c:(multiple functions).\n\n - CVE-2016-7940: Corrected buffer overflows in STP parser print-stp.c:(multiple functions).\n\n - CVE-2016-7973: Corrected buffer overflow in AppleTalk parser print-atalk.c.\n\n - CVE-2016-7974: Corrected buffer overflow in IP parser print-ip.c:(multiple functions).\n\n - CVE-2016-7975: Corrected buffer overflow in TCP parser print-tcp.c:tcp_print().\n\n - CVE-2016-7983,CVE-2016-7984: Corrected buffer overflow in TFTP parser print-tftp.c:tftp_print().\n\n - CVE-2016-7992: Corrected buffer overflow in Classical IP over ATM parser print-cip.c.\n\n - CVE-2016-7993: Corrected buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, etc.).\n\n - CVE-2016-8574: Corrected buffer overflow in FRF.15 parser print-fr.c:frf15_print().\n\n - CVE-2017-5202: Corrected buffer overflow in ISO CLNS parser print-isoclns.c:clnp_print().\n\n - CVE-2017-5203: Corrected buffer overflow in BOOTP parser print-bootp.c:bootp_print().\n\n - CVE-2017-5204: Corrected buffer overflow in IPv6 parser print-ip6.c:ip6_print().\n\n - CVE-2017-5483: Corrected buffer overflow in SNMP parser print-snmp.c:asn1_parse().\n\n - CVE-2017-5484: Corrected buffer overflow in ATM parser print-atm.c:sig_print().\n\n - CVE-2017-5485: Corrected buffer overflow in ISO CLNS parser addrtoname.c:lookup_nsap().\n\n - CVE-2017-5486: Corrected buffer overflow in ISO CLNS parser print-isoclns.c:clnp_print().\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {}, "published": "2017-03-13T00:00:00", "type": "nessus", "title": "SUSE SLES11 Security Update : tcpdump (SUSE-SU-2017:0656-1)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7931", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-19T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:tcpdump", "cpe:/o:novell:suse_linux:11"], "id": "SUSE_SU-2017-0656-1.NASL", "href": "https://www.tenable.com/plugins/nessus/97695", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2017:0656-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(97695);\n script_version(\"3.8\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7931\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n\n script_name(english:\"SUSE SLES11 Security Update : tcpdump (SUSE-SU-2017:0656-1)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update for tcpdump fixes the following issues: Security issues\nfixed (bsc#1020940) :\n\n - CVE-2016-7922: Corrected buffer overflow in AH parser\n print-ah.c:ah_print().\n\n - CVE-2016-7923: Corrected buffer overflow in ARP parser\n print-arp.c:arp_print().\n\n - CVE-2016-7925: Corrected buffer overflow in compressed\n SLIP parser print-sl.c:sl_if_print().\n\n - CVE-2016-7926: Corrected buffer overflow in the Ethernet\n parser print-ether.c:ethertype_print().\n\n - CVE-2016-7927: Corrected buffer overflow in the IEEE\n 802.11 parser print-802_11.c:ieee802_11_radio_print().\n\n - CVE-2016-7928: Corrected buffer overflow in the IPComp\n parser print-ipcomp.c:ipcomp_print().\n\n - CVE-2016-7931: Corrected buffer overflow in the MPLS\n parser print-mpls.c:mpls_print().\n\n - CVE-2016-7936: Corrected buffer overflow in the UDP\n parser print-udp.c:udp_print().\n\n - CVE-2016-7934,CVE-2016-7935,CVE-2016-7937: Corrected\n segmentation faults in function udp_print().\n\n - CVE-2016-7939: Corrected buffer overflows in GRE parser\n print-gre.c:(multiple functions).\n\n - CVE-2016-7940: Corrected buffer overflows in STP parser\n print-stp.c:(multiple functions).\n\n - CVE-2016-7973: Corrected buffer overflow in AppleTalk\n parser print-atalk.c.\n\n - CVE-2016-7974: Corrected buffer overflow in IP parser\n print-ip.c:(multiple functions).\n\n - CVE-2016-7975: Corrected buffer overflow in TCP parser\n print-tcp.c:tcp_print().\n\n - CVE-2016-7983,CVE-2016-7984: Corrected buffer overflow\n in TFTP parser print-tftp.c:tftp_print().\n\n - CVE-2016-7992: Corrected buffer overflow in Classical IP\n over ATM parser print-cip.c.\n\n - CVE-2016-7993: Corrected buffer overflow in multiple\n protocol parsers (DNS, DVMRP, HSRP, etc.).\n\n - CVE-2016-8574: Corrected buffer overflow in FRF.15\n parser print-fr.c:frf15_print().\n\n - CVE-2017-5202: Corrected buffer overflow in ISO CLNS\n parser print-isoclns.c:clnp_print().\n\n - CVE-2017-5203: Corrected buffer overflow in BOOTP parser\n print-bootp.c:bootp_print().\n\n - CVE-2017-5204: Corrected buffer overflow in IPv6 parser\n print-ip6.c:ip6_print().\n\n - CVE-2017-5483: Corrected buffer overflow in SNMP parser\n print-snmp.c:asn1_parse().\n\n - CVE-2017-5484: Corrected buffer overflow in ATM parser\n print-atm.c:sig_print().\n\n - CVE-2017-5485: Corrected buffer overflow in ISO CLNS\n parser addrtoname.c:lookup_nsap().\n\n - CVE-2017-5486: Corrected buffer overflow in ISO CLNS\n parser print-isoclns.c:clnp_print().\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1020940\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7922/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7923/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7925/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7926/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7927/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7928/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7931/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7934/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7935/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7936/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7937/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7939/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7940/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7973/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7974/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7975/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7983/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7984/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7992/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7993/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-8574/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5202/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5203/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5204/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5483/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5484/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5485/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5486/\"\n );\n # https://www.suse.com/support/update/announcement/2017/suse-su-20170656-1/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?daac0dce\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use YaST online_update.\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Server 11-SP4:zypper in -t patch\nslessp4-tcpdump-13021=1\n\nSUSE Linux Enterprise Debuginfo 11-SP4:zypper in -t patch\ndbgsp4-tcpdump-13021=1\n\nTo bring your system up-to-date, use 'zypper patch'.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:11\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/01/28\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/03/10\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/03/13\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = pregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(SLES11)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLES11\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES11\" && (! preg(pattern:\"^(4)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES11 SP4\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES11\", sp:\"4\", reference:\"tcpdump-3.9.8-1.29.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:27:40", "description": "Multiple vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service or the execution of arbitrary code.", "cvss3": {}, "published": "2017-01-30T00:00:00", "type": "nessus", "title": "Debian DSA-3775-1 : tcpdump - security update", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-11T00:00:00", "cpe": ["p-cpe:/a:debian:debian_linux:tcpdump", "cpe:/o:debian:debian_linux:8.0"], "id": "DEBIAN_DSA-3775.NASL", "href": "https://www.tenable.com/plugins/nessus/96844", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-3775. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(96844);\n script_version(\"3.9\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_xref(name:\"DSA\", value:\"3775\");\n\n script_name(english:\"Debian DSA-3775-1 : tcpdump - security update\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Multiple vulnerabilities have been discovered in tcpdump, a\ncommand-line network traffic analyzer. These vulnerabilities might\nresult in denial of service or the execution of arbitrary code.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/jessie/tcpdump\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.debian.org/security/2017/dsa-3775\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the tcpdump packages.\n\nFor the stable distribution (jessie), these problems have been fixed\nin version 4.9.0-1~deb8u1.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:8.0\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/01/28\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/01/29\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/01/30\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"8.0\", prefix:\"tcpdump\", reference:\"4.9.0-1~deb8u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:26:36", "description": "Multiple vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service or the execution of arbitrary code.\n\nCVE-2016-7922\n\nBuffer overflow in parser.\n\nCVE-2016-7923\n\nBuffer overflow in parser.\n\nCVE-2016-7924\n\nBuffer overflow in parser.\n\nCVE-2016-7925\n\nBuffer overflow in parser.\n\nCVE-2016-7926\n\nBuffer overflow in parser.\n\nCVE-2016-7927\n\nBuffer overflow in parser.\n\nCVE-2016-7928\n\nBuffer overflow in parser.\n\nCVE-2016-7929\n\nBuffer overflow in parser.\n\nCVE-2016-7930\n\nBuffer overflow in parser.\n\nCVE-2016-7931\n\nBuffer overflow in parser.\n\nCVE-2016-7932\n\nBuffer overflow in parser.\n\nCVE-2016-7933\n\nBuffer overflow in parser.\n\nCVE-2016-7934\n\nBuffer overflow in parser.\n\nCVE-2016-7935\n\nBuffer overflow in parser.\n\nCVE-2016-7936\n\nBuffer overflow in parser.\n\nCVE-2016-7937\n\nBuffer overflow in parser.\n\nCVE-2016-7938\n\nBuffer overflow in parser.\n\nCVE-2016-7939\n\nBuffer overflow in parser.\n\nCVE-2016-7940\n\nBuffer overflow in parser.\n\nCVE-2016-7973\n\nBuffer overflow in parser.\n\nCVE-2016-7974\n\nBuffer overflow in parser.\n\nCVE-2016-7975\n\nBuffer overflow in parser.\n\nCVE-2016-7983\n\nBuffer overflow in parser.\n\nCVE-2016-7984\n\nBuffer overflow in parser.\n\nCVE-2016-7985\n\nBuffer overflow in parser.\n\nCVE-2016-7986\n\nBuffer overflow in parser.\n\nCVE-2016-7992\n\nBuffer overflow in parser.\n\nCVE-2016-7993\n\nBuffer overflow in parser.\n\nCVE-2016-8574\n\nBuffer overflow in parser.\n\nCVE-2016-8575\n\nBuffer overflow in parser.\n\nCVE-2017-5202\n\nBuffer overflow in parser.\n\nCVE-2017-5203\n\nBuffer overflow in parser.\n\nCVE-2017-5204\n\nBuffer overflow in parser.\n\nCVE-2017-5205\n\nBuffer overflow in parser.\n\nCVE-2017-5341\n\nBuffer overflow in parser.\n\nCVE-2017-5342\n\nBuffer overflow in parser.\n\nCVE-2017-5482\n\nBuffer overflow in parser.\n\nCVE-2017-5483\n\nBuffer overflow in parser.\n\nCVE-2017-5484\n\nBuffer overflow in parser.\n\nCVE-2017-5485\n\nBuffer overflow in parser.\n\nCVE-2017-5486\n\nBuffer overflow in parser.\n\nFor Debian 7 'Wheezy', these problems have been fixed in version 4.9.0-1~deb7u1.\n\nWe recommend that you upgrade your tcpdump packages.\n\nNOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {}, "published": "2017-01-31T00:00:00", "type": "nessus", "title": "Debian DLA-809-1 : tcpdump security update", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-11T00:00:00", "cpe": ["p-cpe:/a:debian:debian_linux:tcpdump", "cpe:/o:debian:debian_linux:7.0"], "id": "DEBIAN_DLA-809.NASL", "href": "https://www.tenable.com/plugins/nessus/96884", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Debian Security Advisory DLA-809-1. The text\n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(96884);\n script_version(\"3.8\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n\n script_name(english:\"Debian DLA-809-1 : tcpdump security update\");\n script_summary(english:\"Checks dpkg output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Multiple vulnerabilities have been discovered in tcpdump, a\ncommand-line network traffic analyzer. These vulnerabilities might\nresult in denial of service or the execution of arbitrary code.\n\nCVE-2016-7922\n\nBuffer overflow in parser.\n\nCVE-2016-7923\n\nBuffer overflow in parser.\n\nCVE-2016-7924\n\nBuffer overflow in parser.\n\nCVE-2016-7925\n\nBuffer overflow in parser.\n\nCVE-2016-7926\n\nBuffer overflow in parser.\n\nCVE-2016-7927\n\nBuffer overflow in parser.\n\nCVE-2016-7928\n\nBuffer overflow in parser.\n\nCVE-2016-7929\n\nBuffer overflow in parser.\n\nCVE-2016-7930\n\nBuffer overflow in parser.\n\nCVE-2016-7931\n\nBuffer overflow in parser.\n\nCVE-2016-7932\n\nBuffer overflow in parser.\n\nCVE-2016-7933\n\nBuffer overflow in parser.\n\nCVE-2016-7934\n\nBuffer overflow in parser.\n\nCVE-2016-7935\n\nBuffer overflow in parser.\n\nCVE-2016-7936\n\nBuffer overflow in parser.\n\nCVE-2016-7937\n\nBuffer overflow in parser.\n\nCVE-2016-7938\n\nBuffer overflow in parser.\n\nCVE-2016-7939\n\nBuffer overflow in parser.\n\nCVE-2016-7940\n\nBuffer overflow in parser.\n\nCVE-2016-7973\n\nBuffer overflow in parser.\n\nCVE-2016-7974\n\nBuffer overflow in parser.\n\nCVE-2016-7975\n\nBuffer overflow in parser.\n\nCVE-2016-7983\n\nBuffer overflow in parser.\n\nCVE-2016-7984\n\nBuffer overflow in parser.\n\nCVE-2016-7985\n\nBuffer overflow in parser.\n\nCVE-2016-7986\n\nBuffer overflow in parser.\n\nCVE-2016-7992\n\nBuffer overflow in parser.\n\nCVE-2016-7993\n\nBuffer overflow in parser.\n\nCVE-2016-8574\n\nBuffer overflow in parser.\n\nCVE-2016-8575\n\nBuffer overflow in parser.\n\nCVE-2017-5202\n\nBuffer overflow in parser.\n\nCVE-2017-5203\n\nBuffer overflow in parser.\n\nCVE-2017-5204\n\nBuffer overflow in parser.\n\nCVE-2017-5205\n\nBuffer overflow in parser.\n\nCVE-2017-5341\n\nBuffer overflow in parser.\n\nCVE-2017-5342\n\nBuffer overflow in parser.\n\nCVE-2017-5482\n\nBuffer overflow in parser.\n\nCVE-2017-5483\n\nBuffer overflow in parser.\n\nCVE-2017-5484\n\nBuffer overflow in parser.\n\nCVE-2017-5485\n\nBuffer overflow in parser.\n\nCVE-2017-5486\n\nBuffer overflow in parser.\n\nFor Debian 7 'Wheezy', these problems have been fixed in version\n4.9.0-1~deb7u1.\n\nWe recommend that you upgrade your tcpdump packages.\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://lists.debian.org/debian-lts-announce/2017/01/msg00046.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/wheezy/tcpdump\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Upgrade the affected tcpdump package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:7.0\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/01/28\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/01/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/01/31\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"7.0\", prefix:\"tcpdump\", reference:\"4.9.0-1~deb7u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:29:48", "description": "It was discovered that tcpdump incorrectly handled certain packets. A remote attacker could use this issue to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code.\n\nIn the default installation, attackers would be isolated by the tcpdump AppArmor profile.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {}, "published": "2017-02-22T00:00:00", "type": "nessus", "title": "Ubuntu 14.04 LTS / 16.04 LTS : tcpdump vulnerabilities (USN-3205-1)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2023-10-20T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:tcpdump", "cpe:/o:canonical:ubuntu_linux:14.04:-:lts", "cpe:/o:canonical:ubuntu_linux:16.04:-:lts"], "id": "UBUNTU_USN-3205-1.NASL", "href": "https://www.tenable.com/plugins/nessus/97318", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3205-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude('compat.inc');\n\nif (description)\n{\n script_id(97318);\n script_version(\"3.8\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2023/10/20\");\n\n script_cve_id(\n \"CVE-2016-7922\",\n \"CVE-2016-7923\",\n \"CVE-2016-7924\",\n \"CVE-2016-7925\",\n \"CVE-2016-7926\",\n \"CVE-2016-7927\",\n \"CVE-2016-7928\",\n \"CVE-2016-7929\",\n \"CVE-2016-7930\",\n \"CVE-2016-7931\",\n \"CVE-2016-7932\",\n \"CVE-2016-7933\",\n \"CVE-2016-7934\",\n \"CVE-2016-7935\",\n \"CVE-2016-7936\",\n \"CVE-2016-7937\",\n \"CVE-2016-7938\",\n \"CVE-2016-7939\",\n \"CVE-2016-7940\",\n \"CVE-2016-7973\",\n \"CVE-2016-7974\",\n \"CVE-2016-7975\",\n \"CVE-2016-7983\",\n \"CVE-2016-7984\",\n \"CVE-2016-7985\",\n \"CVE-2016-7986\",\n \"CVE-2016-7992\",\n \"CVE-2016-7993\",\n \"CVE-2016-8574\",\n \"CVE-2016-8575\",\n \"CVE-2017-5202\",\n \"CVE-2017-5203\",\n \"CVE-2017-5204\",\n \"CVE-2017-5205\",\n \"CVE-2017-5341\",\n \"CVE-2017-5342\",\n \"CVE-2017-5482\",\n \"CVE-2017-5483\",\n \"CVE-2017-5484\",\n \"CVE-2017-5485\",\n \"CVE-2017-5486\"\n );\n script_xref(name:\"USN\", value:\"3205-1\");\n\n script_name(english:\"Ubuntu 14.04 LTS / 16.04 LTS : tcpdump vulnerabilities (USN-3205-1)\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Ubuntu host is missing one or more security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"It was discovered that tcpdump incorrectly handled certain packets. A\nremote attacker could use this issue to cause tcpdump to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n\nIn the default installation, attackers would be isolated by the\ntcpdump AppArmor profile.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://ubuntu.com/security/notices/USN-3205-1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected tcpdump package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2017-5486\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/01/28\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/02/21\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/02/22\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04:-:lts\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:16.04:-:lts\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_copyright(english:\"Ubuntu Security Notice (C) 2017-2023 Canonical, Inc. / NASL script (C) 2017-2023 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\ninclude('debian_package.inc');\n\nif ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nvar os_release = get_kb_item('Host/Ubuntu/release');\nif ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');\nos_release = chomp(os_release);\nif (! ('14.04' >< os_release || '16.04' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 14.04 / 16.04', 'Ubuntu ' + os_release);\nif ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nvar cpu = get_kb_item('Host/cpu');\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif ('x86_64' >!< cpu && cpu !~ \"^i[3-6]86$\" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);\n\nvar pkgs = [\n {'osver': '14.04', 'pkgname': 'tcpdump', 'pkgver': '4.9.0-1ubuntu1~ubuntu14.04.1'},\n {'osver': '16.04', 'pkgname': 'tcpdump', 'pkgver': '4.9.0-1ubuntu1~ubuntu16.04.1'}\n];\n\nvar flag = 0;\nforeach package_array ( pkgs ) {\n var osver = NULL;\n var pkgname = NULL;\n var pkgver = NULL;\n if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];\n if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];\n if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];\n if (osver && pkgname && pkgver) {\n if (ubuntu_check(osver:osver, pkgname:pkgname, pkgver:pkgver)) flag++;\n }\n}\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n var tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'tcpdump');\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-05-18T14:26:18", "description": "An update of the tcpdump package has been released.", "cvss3": {}, "published": "2019-02-07T00:00:00", "type": "nessus", "title": "Photon OS 1.0: Tcpdump PHSA-2017-0004", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2019-02-07T00:00:00", "cpe": ["p-cpe:/a:vmware:photonos:tcpdump", "cpe:/o:vmware:photonos:1.0"], "id": "PHOTONOS_PHSA-2017-0004_TCPDUMP.NASL", "href": "https://www.tenable.com/plugins/nessus/121670", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\n\n# The descriptive text and package checks in this plugin were\n# extracted from VMware Security Advisory PHSA-2017-0004. The text\n# itself is copyright (C) VMware, Inc.\n\n\ninclude('compat.inc');\n\nif (description)\n{\n script_id(121670);\n script_version(\"1.2\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2019/02/07\");\n\n script_cve_id(\n \"CVE-2016-7922\",\n \"CVE-2016-7923\",\n \"CVE-2016-7924\",\n \"CVE-2016-7925\",\n \"CVE-2016-7926\",\n \"CVE-2016-7927\",\n \"CVE-2016-7928\",\n \"CVE-2016-7929\",\n \"CVE-2016-7930\",\n \"CVE-2016-7931\",\n \"CVE-2016-7932\",\n \"CVE-2016-7933\",\n \"CVE-2016-7934\",\n \"CVE-2016-7935\",\n \"CVE-2016-7936\",\n \"CVE-2016-7937\",\n \"CVE-2016-7938\",\n \"CVE-2016-7939\",\n \"CVE-2016-7940\",\n \"CVE-2016-7973\",\n \"CVE-2016-7974\",\n \"CVE-2016-7975\",\n \"CVE-2016-7983\",\n \"CVE-2016-7984\",\n \"CVE-2016-7985\",\n \"CVE-2016-7986\",\n \"CVE-2016-7992\",\n \"CVE-2016-7993\",\n \"CVE-2016-8574\",\n \"CVE-2016-8575\",\n \"CVE-2017-5202\",\n \"CVE-2017-5203\",\n \"CVE-2017-5204\",\n \"CVE-2017-5205\",\n \"CVE-2017-5341\",\n \"CVE-2017-5342\",\n \"CVE-2017-5482\",\n \"CVE-2017-5483\",\n \"CVE-2017-5484\",\n \"CVE-2017-5485\",\n \"CVE-2017-5486\"\n );\n\n script_name(english:\"Photon OS 1.0: Tcpdump PHSA-2017-0004\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote PhotonOS host is missing multiple security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"An update of the tcpdump package has been released.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://github.com/vmware/photon/wiki/Security-Updates-20.md\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected Linux packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-8575\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/02/10\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/02/10\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/02/07\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:vmware:photonos:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:vmware:photonos:1.0\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"PhotonOS Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/PhotonOS/release\", \"Host/PhotonOS/rpm-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/PhotonOS/release\");\nif (isnull(release) || release !~ \"^VMware Photon\") audit(AUDIT_OS_NOT, \"PhotonOS\");\nif (release !~ \"^VMware Photon (?:Linux|OS) 1\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"PhotonOS 1.0\");\n\nif (!get_kb_item(\"Host/PhotonOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"PhotonOS\", cpu);\n\nflag = 0;\n\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\nif (rpm_check(release:\"PhotonOS-1.0\", reference:\"tcpdump-debuginfo-4.9.0-1.ph1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-03T15:09:37", "description": "Security fix for CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {}, "published": "2017-02-15T00:00:00", "type": "nessus", "title": "Fedora 25 : 14:tcpdump (2017-7ecbc90157)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-06T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:14:tcpdump", "cpe:/o:fedoraproject:fedora:25"], "id": "FEDORA_2017-7ECBC90157.NASL", "href": "https://www.tenable.com/plugins/nessus/97172", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2017-7ecbc90157.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(97172);\n script_version(\"3.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_xref(name:\"FEDORA\", value:\"2017-7ecbc90157\");\n\n script_name(english:\"Fedora 25 : 14:tcpdump (2017-7ecbc90157)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security fix for CVE-2016-7922, CVE-2016-7923, CVE-2016-7924,\nCVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928,\nCVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932,\nCVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936,\nCVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940,\nCVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983,\nCVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992,\nCVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202,\nCVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341,\nCVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484,\nCVE-2017-5485, CVE-2017-5486\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2017-7ecbc90157\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected 14:tcpdump package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:14:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:25\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/01/28\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/02/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/02/15\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^25([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 25\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"FC25\", reference:\"tcpdump-4.9.0-1.fc25\", epoch:\"14\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"14:tcpdump\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:28:48", "description": "The remote host is affected by the vulnerability described in GLSA-201702-30 (tcpdump: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in tcpdump. Please review the CVE identifiers referenced below for details.\n Impact :\n\n A remote attacker, by sending a specially crafted network package, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.\n Workaround :\n\n There is no known workaround at this time.", "cvss3": {}, "published": "2017-02-21T00:00:00", "type": "nessus", "title": "GLSA-201702-30 : tcpdump: Multiple vulnerabilities", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-11T00:00:00", "cpe": ["cpe:/o:gentoo:linux", "p-cpe:/a:gentoo:linux:tcpdump"], "id": "GENTOO_GLSA-201702-30.NASL", "href": "https://www.tenable.com/plugins/nessus/97273", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Gentoo Linux Security Advisory GLSA 201702-30.\n#\n# The advisory text is Copyright (C) 2001-2017 Gentoo Foundation, Inc.\n# and licensed under the Creative Commons - Attribution / Share Alike \n# license. See http://creativecommons.org/licenses/by-sa/3.0/\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(97273);\n script_version(\"3.2\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_xref(name:\"GLSA\", value:\"201702-30\");\n\n script_name(english:\"GLSA-201702-30 : tcpdump: Multiple vulnerabilities\");\n script_summary(english:\"Checks for updated package(s) in /var/db/pkg\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Gentoo host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote host is affected by the vulnerability described in GLSA-201702-30\n(tcpdump: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in tcpdump. Please review\n the CVE identifiers referenced below for details.\n \nImpact :\n\n A remote attacker, by sending a specially crafted network package, could\n possibly execute arbitrary code with the privileges of the process or\n cause a Denial of Service condition.\n \nWorkaround :\n\n There is no known workaround at this time.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security.gentoo.org/glsa/201702-30\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"All tcpdump users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose '>=net-analyzer/tcpdump-4.9.0'\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:gentoo:linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/02/21\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/02/21\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Gentoo Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Gentoo/release\", \"Host/Gentoo/qpkg-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"qpkg.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Gentoo/release\")) audit(AUDIT_OS_NOT, \"Gentoo\");\nif (!get_kb_item(\"Host/Gentoo/qpkg-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (qpkg_check(package:\"net-analyzer/tcpdump\", unaffected:make_list(\"ge 4.9.0\"), vulnerable:make_list(\"lt 4.9.0\"))) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:qpkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = qpkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:29:14", "description": "New tcpdump packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. NOTE: These updates also require the updated libpcap package.", "cvss3": {}, "published": "2017-02-13T00:00:00", "type": "nessus", "title": "Slackware 13.37 / 14.0 / 14.1 / 14.2 / current : tcpdump (SSA:2017-041-04)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-14T00:00:00", "cpe": ["p-cpe:/a:slackware:slackware_linux:tcpdump", "cpe:/o:slackware:slackware_linux", "cpe:/o:slackware:slackware_linux:13.37", "cpe:/o:slackware:slackware_linux:14.0", "cpe:/o:slackware:slackware_linux:14.1", "cpe:/o:slackware:slackware_linux:14.2"], "id": "SLACKWARE_SSA_2017-041-04.NASL", "href": "https://www.tenable.com/plugins/nessus/97104", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Slackware Security Advisory 2017-041-04. The text \n# itself is copyright (C) Slackware Linux, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(97104);\n script_version(\"3.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_xref(name:\"SSA\", value:\"2017-041-04\");\n\n script_name(english:\"Slackware 13.37 / 14.0 / 14.1 / 14.2 / current : tcpdump (SSA:2017-041-04)\");\n script_summary(english:\"Checks for updated package in /var/log/packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Slackware host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"New tcpdump packages are available for Slackware 13.37, 14.0, 14.1,\n14.2, and -current to fix security issues. NOTE: These updates also\nrequire the updated libpcap package.\"\n );\n # http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.678407\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?61056724\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected tcpdump package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:slackware:slackware_linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:13.37\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.2\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/01/28\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/02/10\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/02/13\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Slackware Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Slackware/release\", \"Host/Slackware/packages\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"slackware.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Slackware/release\")) audit(AUDIT_OS_NOT, \"Slackware\");\nif (!get_kb_item(\"Host/Slackware/packages\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Slackware\", cpu);\n\n\nflag = 0;\nif (slackware_check(osver:\"13.37\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"i486\", pkgnum:\"1_slack13.37\")) flag++;\nif (slackware_check(osver:\"13.37\", arch:\"x86_64\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"x86_64\", pkgnum:\"1_slack13.37\")) flag++;\n\nif (slackware_check(osver:\"14.0\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"i486\", pkgnum:\"1_slack14.0\")) flag++;\nif (slackware_check(osver:\"14.0\", arch:\"x86_64\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.0\")) flag++;\n\nif (slackware_check(osver:\"14.1\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"i486\", pkgnum:\"1_slack14.1\")) flag++;\nif (slackware_check(osver:\"14.1\", arch:\"x86_64\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.1\")) flag++;\n\nif (slackware_check(osver:\"14.2\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"i586\", pkgnum:\"1_slack14.2\")) flag++;\nif (slackware_check(osver:\"14.2\", arch:\"x86_64\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.2\")) flag++;\n\nif (slackware_check(osver:\"current\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"i586\", pkgnum:\"1\")) flag++;\nif (slackware_check(osver:\"current\", arch:\"x86_64\", pkgname:\"tcpdump\", pkgver:\"4.9.0\", pkgarch:\"x86_64\", pkgnum:\"1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:slackware_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:39:21", "description": "According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :\n\n - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nNote that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {}, "published": "2017-09-08T00:00:00", "type": "nessus", "title": "EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2017-1180)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-06T00:00:00", "cpe": ["p-cpe:/a:huawei:euleros:tcpdump", "cpe:/o:huawei:euleros:2.0"], "id": "EULEROS_SA-2017-1180.NASL", "href": "https://www.tenable.com/plugins/nessus/103018", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(103018);\n script_version(\"3.13\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\n \"CVE-2015-0261\",\n \"CVE-2015-2153\",\n \"CVE-2015-2154\",\n \"CVE-2015-2155\",\n \"CVE-2016-7922\",\n \"CVE-2016-7923\",\n \"CVE-2016-7924\",\n \"CVE-2016-7925\",\n \"CVE-2016-7926\",\n \"CVE-2016-7927\",\n \"CVE-2016-7928\",\n \"CVE-2016-7929\",\n \"CVE-2016-7930\",\n \"CVE-2016-7931\",\n \"CVE-2016-7932\",\n \"CVE-2016-7933\",\n \"CVE-2016-7934\",\n \"CVE-2016-7935\",\n \"CVE-2016-7936\",\n \"CVE-2016-7937\",\n \"CVE-2016-7938\",\n \"CVE-2016-7939\",\n \"CVE-2016-7940\",\n \"CVE-2016-7973\",\n \"CVE-2016-7974\",\n \"CVE-2016-7975\",\n \"CVE-2016-7983\",\n \"CVE-2016-7984\",\n \"CVE-2016-7985\",\n \"CVE-2016-7986\",\n \"CVE-2016-7992\",\n \"CVE-2016-7993\",\n \"CVE-2016-8574\",\n \"CVE-2016-8575\",\n \"CVE-2017-5202\",\n \"CVE-2017-5203\",\n \"CVE-2017-5204\",\n \"CVE-2017-5205\",\n \"CVE-2017-5341\",\n \"CVE-2017-5342\",\n \"CVE-2017-5482\",\n \"CVE-2017-5483\",\n \"CVE-2017-5484\",\n \"CVE-2017-5485\",\n \"CVE-2017-5486\"\n );\n script_bugtraq_id(\n 73017,\n 73018,\n 73019,\n 73021\n );\n\n script_name(english:\"EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2017-1180)\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing multiple security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the versions of the tcpdump package installed, the\nEulerOS installation on the remote host is affected by the following\nvulnerabilities :\n\n - Multiple out of bounds read and integer overflow\n vulnerabilities were found in tcpdump affecting the\n decoding of various protocols. An attacker could create\n a crafted pcap file or send specially crafted packets\n to the network segment where tcpdump is running in live\n capture mode (without -w) which could cause it to\n display incorrect data, crash or enter an infinite\n loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154,\n CVE-2015-2155, CVE-2016-7922, CVE-2016-7923,\n CVE-2016-7924, CVE-2016-7925, CVE-2016-7926,\n CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,\n CVE-2016-7930, CVE-2016-7931, CVE-2016-7932,\n CVE-2016-7933, CVE-2016-7934, CVE-2016-7935,\n CVE-2016-7936, CVE-2016-7937, CVE-2016-7938,\n CVE-2016-7939, CVE-2016-7940, CVE-2016-7973,\n CVE-2016-7974, CVE-2016-7975, CVE-2016-7983,\n CVE-2016-7984, CVE-2016-7985, CVE-2016-7986,\n CVE-2016-7992, CVE-2016-7993, CVE-2016-8574,\n CVE-2016-8575, CVE-2017-5202, CVE-2017-5203,\n CVE-2017-5204, CVE-2017-5205, CVE-2017-5341,\n CVE-2017-5342, CVE-2017-5482, CVE-2017-5483,\n CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2017-1180\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?fafadb1e\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected tcpdump packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/08/18\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/09/08\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n script_exclude_keys(\"Host/EulerOS/uvp_version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(2)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP2\");\n\nuvp = get_kb_item(\"Host/EulerOS/uvp_version\");\nif (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP2\", \"EulerOS UVP \" + uvp);\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"aarch64\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_ARCH_NOT, \"i686 / x86_64\", cpu);\n\nflag = 0;\n\npkgs = [\"tcpdump-4.9.0-5\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"2\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-03T15:21:33", "description": "From Red Hat Security Advisory 2017:1871 :\n\nAn update for tcpdump is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\nThe tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version:\ntcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es) :\n\n* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.", "cvss3": {}, "published": "2017-08-09T00:00:00", "type": "nessus", "title": "Oracle Linux 7 : tcpdump (ELSA-2017-1871)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-14T00:00:00", "cpe": ["p-cpe:/a:oracle:linux:tcpdump", "cpe:/o:oracle:linux:7"], "id": "ORACLELINUX_ELSA-2017-1871.NASL", "href": "https://www.tenable.com/plugins/nessus/102287", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2017:1871 and \n# Oracle Linux Security Advisory ELSA-2017-1871 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(102287);\n script_version(\"3.6\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2015-0261\", \"CVE-2015-2153\", \"CVE-2015-2154\", \"CVE-2015-2155\", \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_xref(name:\"RHSA\", value:\"2017:1871\");\n\n script_name(english:\"Oracle Linux 7 : tcpdump (ELSA-2017-1871)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2017:1871 :\n\nAn update for tcpdump is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Moderate. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nThe tcpdump packages contain the tcpdump utility for monitoring\nnetwork traffic. The tcpdump utility can capture and display the\npacket headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version:\ntcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es) :\n\n* Multiple out of bounds read and integer overflow vulnerabilities\nwere found in tcpdump affecting the decoding of various protocols. An\nattacker could create a crafted pcap file or send specially crafted\npackets to the network segment where tcpdump is running in live\ncapture mode (without -w) which could cause it to display incorrect\ndata, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153,\nCVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923,\nCVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927,\nCVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931,\nCVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935,\nCVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939,\nCVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975,\nCVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986,\nCVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575,\nCVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205,\nCVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483,\nCVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting\nCVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925,\nCVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,\nCVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933,\nCVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937,\nCVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973,\nCVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984,\nCVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993,\nCVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203,\nCVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342,\nCVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and\nCVE-2017-5486.\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 7.4 Release Notes linked from the References section.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2017-August/007078.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected tcpdump package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/03/24\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/08/08\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/08/09\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 7\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\nif (\"x86_64\" >!< cpu) audit(AUDIT_ARCH_NOT, \"x86_64\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"tcpdump-4.9.0-5.el7\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:37:58", "description": "An update for tcpdump is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\nThe tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version:\ntcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es) :\n\n* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.", "cvss3": {}, "published": "2017-08-03T00:00:00", "type": "nessus", "title": "RHEL 7 : tcpdump (RHSA-2017:1871)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2019-10-24T00:00:00", "cpe": ["p-cpe:/a:redhat:enterprise_linux:tcpdump", "p-cpe:/a:redhat:enterprise_linux:tcpdump-debuginfo", "cpe:/o:redhat:enterprise_linux:7", "cpe:/o:redhat:enterprise_linux:7.4", "cpe:/o:redhat:enterprise_linux:7.5", "cpe:/o:redhat:enterprise_linux:7.6", "cpe:/o:redhat:enterprise_linux:7.7"], "id": "REDHAT-RHSA-2017-1871.NASL", "href": "https://www.tenable.com/plugins/nessus/102148", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2017:1871. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(102148);\n script_version(\"3.11\");\n script_cvs_date(\"Date: 2019/10/24 15:35:43\");\n\n script_cve_id(\"CVE-2015-0261\", \"CVE-2015-2153\", \"CVE-2015-2154\", \"CVE-2015-2155\", \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_xref(name:\"RHSA\", value:\"2017:1871\");\n\n script_name(english:\"RHEL 7 : tcpdump (RHSA-2017:1871)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An update for tcpdump is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Moderate. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nThe tcpdump packages contain the tcpdump utility for monitoring\nnetwork traffic. The tcpdump utility can capture and display the\npacket headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version:\ntcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es) :\n\n* Multiple out of bounds read and integer overflow vulnerabilities\nwere found in tcpdump affecting the decoding of various protocols. An\nattacker could create a crafted pcap file or send specially crafted\npackets to the network segment where tcpdump is running in live\ncapture mode (without -w) which could cause it to display incorrect\ndata, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153,\nCVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923,\nCVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927,\nCVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931,\nCVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935,\nCVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939,\nCVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975,\nCVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986,\nCVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575,\nCVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205,\nCVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483,\nCVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting\nCVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925,\nCVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,\nCVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933,\nCVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937,\nCVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973,\nCVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984,\nCVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993,\nCVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203,\nCVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342,\nCVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and\nCVE-2017-5486.\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 7.4 Release Notes linked from the References section.\"\n );\n # https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?3395ff0b\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2017:1871\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-0261\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-2153\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-2154\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2015-2155\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7922\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7923\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7924\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7925\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7926\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7927\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7928\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7929\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7930\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7931\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7932\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7933\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7934\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7935\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7936\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7937\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7938\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7939\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7940\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7973\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7974\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7975\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7983\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7984\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7985\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7986\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7992\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-7993\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-8574\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-8575\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5202\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5203\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5204\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5205\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5341\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5342\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5482\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5483\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5484\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5485\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5486\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected tcpdump and / or tcpdump-debuginfo packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:tcpdump-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.5\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/03/24\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/08/01\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/08/03\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 7.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2017:1871\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"tcpdump-4.9.0-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"tcpdump-4.9.0-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"tcpdump-debuginfo-4.9.0-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"tcpdump-debuginfo-4.9.0-5.el7\")) flag++;\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump / tcpdump-debuginfo\");\n }\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:37:48", "description": "The following packages have been upgraded to a later upstream version:\ntcpdump (4.9.0).\n\nSecurity Fix(es) :\n\n - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop.\n (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)", "cvss3": {}, "published": "2017-08-22T00:00:00", "type": "nessus", "title": "Scientific Linux Security Update : tcpdump on SL7.x x86_64 (20170801)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-14T00:00:00", "cpe": ["p-cpe:/a:fermilab:scientific_linux:tcpdump", "p-cpe:/a:fermilab:scientific_linux:tcpdump-debuginfo", "x-cpe:/o:fermilab:scientific_linux"], "id": "SL_20170801_TCPDUMP_ON_SL7_X.NASL", "href": "https://www.tenable.com/plugins/nessus/102657", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(102657);\n script_version(\"3.6\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2015-0261\", \"CVE-2015-2153\", \"CVE-2015-2154\", \"CVE-2015-2155\", \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n\n script_name(english:\"Scientific Linux Security Update : tcpdump on SL7.x x86_64 (20170801)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The following packages have been upgraded to a later upstream version:\ntcpdump (4.9.0).\n\nSecurity Fix(es) :\n\n - Multiple out of bounds read and integer overflow\n vulnerabilities were found in tcpdump affecting the\n decoding of various protocols. An attacker could create\n a crafted pcap file or send specially crafted packets to\n the network segment where tcpdump is running in live\n capture mode (without -w) which could cause it to\n display incorrect data, crash or enter an infinite loop.\n (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154,\n CVE-2015-2155, CVE-2016-7922, CVE-2016-7923,\n CVE-2016-7924, CVE-2016-7925, CVE-2016-7926,\n CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,\n CVE-2016-7930, CVE-2016-7931, CVE-2016-7932,\n CVE-2016-7933, CVE-2016-7934, CVE-2016-7935,\n CVE-2016-7936, CVE-2016-7937, CVE-2016-7938,\n CVE-2016-7939, CVE-2016-7940, CVE-2016-7973,\n CVE-2016-7974, CVE-2016-7975, CVE-2016-7983,\n CVE-2016-7984, CVE-2016-7985, CVE-2016-7986,\n CVE-2016-7992, CVE-2016-7993, CVE-2016-8574,\n CVE-2016-8575, CVE-2017-5202, CVE-2017-5203,\n CVE-2017-5204, CVE-2017-5205, CVE-2017-5341,\n CVE-2017-5342, CVE-2017-5482, CVE-2017-5483,\n CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1708&L=scientific-linux-errata&F=&S=&P=9866\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?eff13fa5\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected tcpdump and / or tcpdump-debuginfo packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:tcpdump-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/03/24\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/08/01\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/08/22\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nos_ver = pregmatch(pattern: \"Scientific Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Scientific Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Scientific Linux 7.x\", \"Scientific Linux \" + os_ver);\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\nif (\"x86_64\" >!< cpu) audit(AUDIT_ARCH_NOT, \"x86_64\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"tcpdump-4.9.0-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"tcpdump-debuginfo-4.9.0-5.el7\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump / tcpdump-debuginfo\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-05-20T14:40:07", "description": "An update of [tcpdump] packages for PhotonOS has been released.", "cvss3": {}, "published": "2018-08-17T00:00:00", "type": "nessus", "title": "Photon OS 1.0: Tcpdump PHSA-2017-0004 (deprecated)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2019-02-07T00:00:00", "cpe": ["p-cpe:/a:vmware:photonos:tcpdump", "cpe:/o:vmware:photonos:1.0"], "id": "PHOTONOS_PHSA-2017-0004.NASL", "href": "https://www.tenable.com/plugins/nessus/111853", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# @DEPRECATED@\n#\n# Disabled on 2/7/2019\n#\n\n# The descriptive text and package checks in this plugin were\n# extracted from VMware Security Advisory PHSA-2017-0004. The text\n# itself is copyright (C) VMware, Inc.\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(111853);\n script_version(\"1.2\");\n script_cvs_date(\"Date: 2019/02/07 18:59:50\");\n\n script_cve_id(\n \"CVE-2016-7922\",\n \"CVE-2016-7923\",\n \"CVE-2016-7924\",\n \"CVE-2016-7925\",\n \"CVE-2016-7926\",\n \"CVE-2016-7927\",\n \"CVE-2016-7928\",\n \"CVE-2016-7929\",\n \"CVE-2016-7930\",\n \"CVE-2016-7931\",\n \"CVE-2016-7932\",\n \"CVE-2016-7933\",\n \"CVE-2016-7934\",\n \"CVE-2016-7935\",\n \"CVE-2016-7936\",\n \"CVE-2016-7937\",\n \"CVE-2016-7938\",\n \"CVE-2016-7939\",\n \"CVE-2016-7940\",\n \"CVE-2016-7973\",\n \"CVE-2016-7974\",\n \"CVE-2016-7975\",\n \"CVE-2016-7983\",\n \"CVE-2016-7984\",\n \"CVE-2016-7985\",\n \"CVE-2016-7986\",\n \"CVE-2016-7992\",\n \"CVE-2016-7993\",\n \"CVE-2016-8574\",\n \"CVE-2016-8575\",\n \"CVE-2017-5202\",\n \"CVE-2017-5203\",\n \"CVE-2017-5204\",\n \"CVE-2017-5205\",\n \"CVE-2017-5341\",\n \"CVE-2017-5342\",\n \"CVE-2017-5482\",\n \"CVE-2017-5483\",\n \"CVE-2017-5484\",\n \"CVE-2017-5485\",\n \"CVE-2017-5486\"\n );\n\n script_name(english:\"Photon OS 1.0: Tcpdump PHSA-2017-0004 (deprecated)\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"This plugin has been deprecated.\");\n script_set_attribute(attribute:\"description\", value:\n\"An update of [tcpdump] packages for PhotonOS has been released.\");\n # https://github.com/vmware/photon/wiki/Security-Updates-20\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?bc33760a\");\n script_set_attribute(attribute:\"solution\", value:\"n/a.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-7922\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/02/10\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/08/17\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:vmware:photonos:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:vmware:photonos:1.0\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"PhotonOS Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/PhotonOS/release\", \"Host/PhotonOS/rpm-list\");\n\n exit(0);\n}\n\nexit(0, \"This plugin has been deprecated.\");\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/PhotonOS/release\");\nif (isnull(release) || release !~ \"^VMware Photon\") audit(AUDIT_OS_NOT, \"PhotonOS\");\nif (release !~ \"^VMware Photon (?:Linux|OS) 1\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"PhotonOS 1.0\");\n\nif (!get_kb_item(\"Host/PhotonOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"PhotonOS\", cpu);\n\nflag = 0;\n\npkgs = [\n \"tcpdump-4.9.0-1.ph1\",\n \"tcpdump-debuginfo-4.9.0-1.ph1\"\n];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"PhotonOS-1.0\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:39:21", "description": "According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :\n\n - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nNote that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {}, "published": "2017-09-08T00:00:00", "type": "nessus", "title": "EulerOS 2.0 SP1 : tcpdump (EulerOS-SA-2017-1179)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-06T00:00:00", "cpe": ["p-cpe:/a:huawei:euleros:tcpdump", "cpe:/o:huawei:euleros:2.0"], "id": "EULEROS_SA-2017-1179.NASL", "href": "https://www.tenable.com/plugins/nessus/103017", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(103017);\n script_version(\"3.13\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\n \"CVE-2015-0261\",\n \"CVE-2015-2153\",\n \"CVE-2015-2154\",\n \"CVE-2015-2155\",\n \"CVE-2016-7922\",\n \"CVE-2016-7923\",\n \"CVE-2016-7924\",\n \"CVE-2016-7925\",\n \"CVE-2016-7926\",\n \"CVE-2016-7927\",\n \"CVE-2016-7928\",\n \"CVE-2016-7929\",\n \"CVE-2016-7930\",\n \"CVE-2016-7931\",\n \"CVE-2016-7932\",\n \"CVE-2016-7933\",\n \"CVE-2016-7934\",\n \"CVE-2016-7935\",\n \"CVE-2016-7936\",\n \"CVE-2016-7937\",\n \"CVE-2016-7938\",\n \"CVE-2016-7939\",\n \"CVE-2016-7940\",\n \"CVE-2016-7973\",\n \"CVE-2016-7974\",\n \"CVE-2016-7975\",\n \"CVE-2016-7983\",\n \"CVE-2016-7984\",\n \"CVE-2016-7985\",\n \"CVE-2016-7986\",\n \"CVE-2016-7992\",\n \"CVE-2016-7993\",\n \"CVE-2016-8574\",\n \"CVE-2016-8575\",\n \"CVE-2017-5202\",\n \"CVE-2017-5203\",\n \"CVE-2017-5204\",\n \"CVE-2017-5205\",\n \"CVE-2017-5341\",\n \"CVE-2017-5342\",\n \"CVE-2017-5482\",\n \"CVE-2017-5483\",\n \"CVE-2017-5484\",\n \"CVE-2017-5485\",\n \"CVE-2017-5486\"\n );\n script_bugtraq_id(\n 73017,\n 73018,\n 73019,\n 73021\n );\n\n script_name(english:\"EulerOS 2.0 SP1 : tcpdump (EulerOS-SA-2017-1179)\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing multiple security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the versions of the tcpdump package installed, the\nEulerOS installation on the remote host is affected by the following\nvulnerabilities :\n\n - Multiple out of bounds read and integer overflow\n vulnerabilities were found in tcpdump affecting the\n decoding of various protocols. An attacker could create\n a crafted pcap file or send specially crafted packets\n to the network segment where tcpdump is running in live\n capture mode (without -w) which could cause it to\n display incorrect data, crash or enter an infinite\n loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154,\n CVE-2015-2155, CVE-2016-7922, CVE-2016-7923,\n CVE-2016-7924, CVE-2016-7925, CVE-2016-7926,\n CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,\n CVE-2016-7930, CVE-2016-7931, CVE-2016-7932,\n CVE-2016-7933, CVE-2016-7934, CVE-2016-7935,\n CVE-2016-7936, CVE-2016-7937, CVE-2016-7938,\n CVE-2016-7939, CVE-2016-7940, CVE-2016-7973,\n CVE-2016-7974, CVE-2016-7975, CVE-2016-7983,\n CVE-2016-7984, CVE-2016-7985, CVE-2016-7986,\n CVE-2016-7992, CVE-2016-7993, CVE-2016-8574,\n CVE-2016-8575, CVE-2017-5202, CVE-2017-5203,\n CVE-2017-5204, CVE-2017-5205, CVE-2017-5341,\n CVE-2017-5342, CVE-2017-5482, CVE-2017-5483,\n CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2017-1179\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?0718d59b\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected tcpdump packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/08/18\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/09/08\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n script_exclude_keys(\"Host/EulerOS/uvp_version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(1)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\");\n\nuvp = get_kb_item(\"Host/EulerOS/uvp_version\");\nif (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\", \"EulerOS UVP \" + uvp);\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"aarch64\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_ARCH_NOT, \"i686 / x86_64\", cpu);\n\nflag = 0;\n\npkgs = [\"tcpdump-4.9.0-5\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"1\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:37:50", "description": "An update for tcpdump is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\nThe tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version:\ntcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es) :\n\n* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.", "cvss3": {}, "published": "2017-08-25T00:00:00", "type": "nessus", "title": "CentOS 7 : tcpdump (CESA-2017:1871)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-04T00:00:00", "cpe": ["p-cpe:/a:centos:centos:tcpdump", "cpe:/o:centos:centos:7"], "id": "CENTOS_RHSA-2017-1871.NASL", "href": "https://www.tenable.com/plugins/nessus/102742", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2017:1871 and \n# CentOS Errata and Security Advisory 2017:1871 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(102742);\n script_version(\"3.8\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2015-0261\", \"CVE-2015-2153\", \"CVE-2015-2154\", \"CVE-2015-2155\", \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_xref(name:\"RHSA\", value:\"2017:1871\");\n\n script_name(english:\"CentOS 7 : tcpdump (CESA-2017:1871)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An update for tcpdump is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Moderate. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nThe tcpdump packages contain the tcpdump utility for monitoring\nnetwork traffic. The tcpdump utility can capture and display the\npacket headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version:\ntcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es) :\n\n* Multiple out of bounds read and integer overflow vulnerabilities\nwere found in tcpdump affecting the decoding of various protocols. An\nattacker could create a crafted pcap file or send specially crafted\npackets to the network segment where tcpdump is running in live\ncapture mode (without -w) which could cause it to display incorrect\ndata, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153,\nCVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923,\nCVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927,\nCVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931,\nCVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935,\nCVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939,\nCVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975,\nCVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986,\nCVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575,\nCVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205,\nCVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483,\nCVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting\nCVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925,\nCVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,\nCVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933,\nCVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937,\nCVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973,\nCVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984,\nCVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993,\nCVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203,\nCVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342,\nCVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and\nCVE-2017-5486.\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 7.4 Release Notes linked from the References section.\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004570.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?47dc971b\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected tcpdump package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2015-0261\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/03/24\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/08/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/08/25\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 7.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"tcpdump-4.9.0-5.el7\")) flag++;\n\n\nif (flag)\n{\n cr_plugin_caveat = '\\n' +\n 'NOTE: The security advisory associated with this vulnerability has a\\n' +\n 'fixed package version that may only be available in the continuous\\n' +\n 'release (CR) repository for CentOS, until it is present in the next\\n' +\n 'point release of CentOS.\\n\\n' +\n\n 'If an equal or higher package level does not exist in the baseline\\n' +\n 'repository for your major version of CentOS, then updates from the CR\\n' +\n 'repository will need to be applied in order to address the\\n' +\n 'vulnerability.\\n';\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + cr_plugin_caveat\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:32:56", "description": "This update for tcpdump to version 4.9.0 and libpcap to version 1.8.1 fixes the several issues. These security issues were fixed in tcpdump :\n\n - CVE-2016-7922: The AH parser in tcpdump had a buffer overflow in print-ah.c:ah_print() (bsc#1020940).\n\n - CVE-2016-7923: The ARP parser in tcpdump had a buffer overflow in print-arp.c:arp_print() (bsc#1020940).\n\n - CVE-2016-7924: The ATM parser in tcpdump had a buffer overflow in print-atm.c:oam_print() (bsc#1020940).\n\n - CVE-2016-7925: The compressed SLIP parser in tcpdump had a buffer overflow in print-sl.c:sl_if_print() (bsc#1020940).\n\n - CVE-2016-7926: The Ethernet parser in tcpdump had a buffer overflow in print-ether.c:ethertype_print() (bsc#1020940).\n\n - CVE-2016-7927: The IEEE 802.11 parser in tcpdump had a buffer overflow in print-802_11.c:ieee802_11_radio_print() (bsc#1020940).\n\n - CVE-2016-7928: The IPComp parser in tcpdump had a buffer overflow in print-ipcomp.c:ipcomp_print() (bsc#1020940).\n\n - CVE-2016-7929: The Juniper PPPoE ATM parser in tcpdump had a buffer overflow in print-juniper.c:juniper_parse_header() (bsc#1020940).\n\n - CVE-2016-7930: The LLC/SNAP parser in tcpdump had a buffer overflow in print-llc.c:llc_print() (bsc#1020940).\n\n - CVE-2016-7931: The MPLS parser in tcpdump had a buffer overflow in print-mpls.c:mpls_print() (bsc#1020940).\n\n - CVE-2016-7932: The PIM parser in tcpdump had a buffer overflow in print-pim.c:pimv2_check_checksum() (bsc#1020940).\n\n - CVE-2016-7933: The PPP parser in tcpdump had a buffer overflow in print-ppp.c:ppp_hdlc_if_print() (bsc#1020940).\n\n - CVE-2016-7934: The RTCP parser in tcpdump had a buffer overflow in print-udp.c:rtcp_print() (bsc#1020940).\n\n - CVE-2016-7935: The RTP parser in tcpdump had a buffer overflow in print-udp.c:rtp_print() (bsc#1020940).\n\n - CVE-2016-7936: The UDP parser in tcpdump had a buffer overflow in print-udp.c:udp_print() (bsc#1020940).\n\n - CVE-2016-7937: The VAT parser in tcpdump had a buffer overflow in print-udp.c:vat_print() (bsc#1020940).\n\n - CVE-2016-7938: The ZeroMQ parser in tcpdump had an integer overflow in print-zeromq.c:zmtp1_print_frame() (bsc#1020940).\n\n - CVE-2016-7939: The GRE parser in tcpdump had a buffer overflow in print-gre.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7940: The STP parser in tcpdump had a buffer overflow in print-stp.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7973: The AppleTalk parser in tcpdump had a buffer overflow in print-atalk.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7974: The IP parser in tcpdump had a buffer overflow in print-ip.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7975: The TCP parser in tcpdump had a buffer overflow in print-tcp.c:tcp_print() (bsc#1020940).\n\n - CVE-2016-7983: The BOOTP parser in tcpdump had a buffer overflow in print-bootp.c:bootp_print() (bsc#1020940).\n\n - CVE-2016-7984: The TFTP parser in tcpdump had a buffer overflow in print-tftp.c:tftp_print() (bsc#1020940).\n\n - CVE-2016-7985: The CALM FAST parser in tcpdump had a buffer overflow in print-calm-fast.c:calm_fast_print() (bsc#1020940).\n\n - CVE-2016-7986: The GeoNetworking parser in tcpdump had a buffer overflow in print-geonet.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7992: The Classical IP over ATM parser in tcpdump had a buffer overflow in print-cip.c:cip_if_print() (bsc#1020940).\n\n - CVE-2016-7993: A bug in util-print.c:relts_print() in tcpdump could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM) (bsc#1020940).\n\n - CVE-2016-8574: The FRF.15 parser in tcpdump had a buffer overflow in print-fr.c:frf15_print() (bsc#1020940).\n\n - CVE-2016-8575: The Q.933 parser in tcpdump had a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482 (bsc#1020940).\n\n - CVE-2017-5202: The ISO CLNS parser in tcpdump had a buffer overflow in print-isoclns.c:clnp_print() (bsc#1020940).\n\n - CVE-2017-5203: The BOOTP parser in tcpdump had a buffer overflow in print-bootp.c:bootp_print() (bsc#1020940).\n\n - CVE-2017-5204: The IPv6 parser in tcpdump had a buffer overflow in print-ip6.c:ip6_print() (bsc#1020940).\n\n - CVE-2017-5205: The ISAKMP parser in tcpdump had a buffer overflow in print-isakmp.c:ikev2_e_print() (bsc#1020940).\n\n - CVE-2017-5341: The OTV parser in tcpdump had a buffer overflow in print-otv.c:otv_print() (bsc#1020940).\n\n - CVE-2017-5342: In tcpdump a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print() (bsc#1020940).\n\n - CVE-2017-5482: The Q.933 parser in tcpdump had a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575 (bsc#1020940).\n\n - CVE-2017-5483: The SNMP parser in tcpdump had a buffer overflow in print-snmp.c:asn1_parse() (bsc#1020940).\n\n - CVE-2017-5484: The ATM parser in tcpdump had a buffer overflow in print-atm.c:sig_print() (bsc#1020940).\n\n - CVE-2017-5485: The ISO CLNS parser in tcpdump had a buffer overflow in addrtoname.c:lookup_nsap() (bsc#1020940).\n\n - CVE-2017-5486: The ISO CLNS parser in tcpdump had a buffer overflow in print-isoclns.c:clnp_print() (bsc#1020940).\n\n - CVE-2015-3138: Fixed potential denial of service in print-wb.c (bsc#927637).\n\n - CVE-2015-0261: Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value (bsc#922220).\n\n - CVE-2015-2153: The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU) (bsc#922221).\n\n - CVE-2015-2154: The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value (bsc#922222).\n\n - CVE-2015-2155: The force printer in tcpdump allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors (bsc#922223).\n\n - CVE-2014-8767: Integer underflow in the olsr_print function in tcpdump 3.9.6 when in verbose mode, allowed remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame (bsc#905870).\n\n - CVE-2014-8768: Multiple Integer underflows in the geonet_print function in tcpdump when run in verbose mode, allowed remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame (bsc#905871).\n\n - CVE-2014-8769: tcpdump might have allowed remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access (bsc#905872). These non-security issues were fixed in tcpdump :\n\n - PPKI to Router Protocol: Fix Segmentation Faults and other problems\n\n - RPKI to Router Protocol: print strings with fn_printn()\n\n - Added a short option '#', same as long option '--number'\n\n - nflog, mobile, forces, pptp, AODV, AHCP, IPv6, OSPFv4, RPL, DHCPv6 enhancements/fixes\n\n - M3UA decode added.\n\n - Added bittok2str().\n\n - A number of unaligned access faults fixed\n\n - The -A flag does not consider CR to be printable anymore\n\n - fx.lebail took over coverity baby sitting\n\n - Default snapshot size increased to 256K for accomodate USB captures These non-security issues were fixed in libpcap :\n\n - Provide a -devel-static subpackage that contains the static libraries and all the extra dependencies which are not needed for dynamic linking.\n\n - Fix handling of packet count in the TPACKET_V3 inner loop\n\n - Filter out duplicate looped back CAN frames.\n\n - Fix the handling of loopback filters for IPv6 packets.\n\n - Add a link-layer header type for RDS (IEC 62106) groups.\n\n - Handle all CAN captures with pcap-linux.c, in cooked mode.\n\n - Removes the need for the 'host-endian' link-layer header type.\n\n - Have separate DLTs for big-endian and host-endian SocketCAN headers.\n\n - Properly check for sock_recv() errors.\n\n - Re-impose some of Winsock's limitations on sock_recv().\n\n - Replace sprintf() with pcap_snprintf().\n\n - Fix signature of pcap_stats_ex_remote().\n\n - Have rpcap_remoteact_getsock() return a SOCKET and supply an 'is active' flag.\n\n - Clean up {DAG, Septel, Myricom SNF}-only builds.\n\n - pcap_create_interface() needs the interface name on Linux.\n\n - Clean up hardware time stamp support: the 'any' device does not support any time stamp types.\n\n - Recognize 802.1ad nested VLAN tag in vlan filter.\n\n - Support for filtering Geneve encapsulated packets.\n\n - Fix handling of zones for BPF on Solaris\n\n - Added bpf_filter1() with extensions\n\n - EBUSY can now be returned by SNFv3 code.\n\n - Don't crash on filters testing a non-existent link-layer type field.\n\n - Fix sending in non-blocking mode on Linux with memory-mapped capture.\n\n - Fix timestamps when reading pcap-ng files on big-endian machines.\n\n - Fixes for byte order issues with NFLOG captures\n\n - Handle using cooked mode for DLT_NETLINK in activate_new().\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {}, "published": "2017-04-27T00:00:00", "type": "nessus", "title": "SUSE SLED12 / SLES12 Security Update : tcpdump, libpcap (SUSE-SU-2017:1110-1)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2014-8767", "CVE-2014-8768", "CVE-2014-8769", "CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2015-3138", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-06T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:libpcap-debugsource", "p-cpe:/a:novell:suse_linux:libpcap1", "p-cpe:/a:novell:suse_linux:libpcap1-debuginfo", "p-cpe:/a:novell:suse_linux:tcpdump", "p-cpe:/a:novell:suse_linux:tcpdump-debuginfo", "p-cpe:/a:novell:suse_linux:tcpdump-debugsource", "cpe:/o:novell:suse_linux:12"], "id": "SUSE_SU-2017-1110-1.NASL", "href": "https://www.tenable.com/plugins/nessus/99705", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2017:1110-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(99705);\n script_version(\"3.8\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2014-8767\", \"CVE-2014-8768\", \"CVE-2014-8769\", \"CVE-2015-0261\", \"CVE-2015-2153\", \"CVE-2015-2154\", \"CVE-2015-2155\", \"CVE-2015-3138\", \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_bugtraq_id(71150, 71153, 71155, 73017, 73018, 73019, 73021);\n\n script_name(english:\"SUSE SLED12 / SLES12 Security Update : tcpdump, libpcap (SUSE-SU-2017:1110-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update for tcpdump to version 4.9.0 and libpcap to version 1.8.1\nfixes the several issues. These security issues were fixed in \ntcpdump :\n\n - CVE-2016-7922: The AH parser in tcpdump had a buffer\n overflow in print-ah.c:ah_print() (bsc#1020940).\n\n - CVE-2016-7923: The ARP parser in tcpdump had a buffer\n overflow in print-arp.c:arp_print() (bsc#1020940).\n\n - CVE-2016-7924: The ATM parser in tcpdump had a buffer\n overflow in print-atm.c:oam_print() (bsc#1020940).\n\n - CVE-2016-7925: The compressed SLIP parser in tcpdump had\n a buffer overflow in print-sl.c:sl_if_print()\n (bsc#1020940).\n\n - CVE-2016-7926: The Ethernet parser in tcpdump had a\n buffer overflow in print-ether.c:ethertype_print()\n (bsc#1020940).\n\n - CVE-2016-7927: The IEEE 802.11 parser in tcpdump had a\n buffer overflow in\n print-802_11.c:ieee802_11_radio_print() (bsc#1020940).\n\n - CVE-2016-7928: The IPComp parser in tcpdump had a buffer\n overflow in print-ipcomp.c:ipcomp_print() (bsc#1020940).\n\n - CVE-2016-7929: The Juniper PPPoE ATM parser in tcpdump\n had a buffer overflow in\n print-juniper.c:juniper_parse_header() (bsc#1020940).\n\n - CVE-2016-7930: The LLC/SNAP parser in tcpdump had a\n buffer overflow in print-llc.c:llc_print()\n (bsc#1020940).\n\n - CVE-2016-7931: The MPLS parser in tcpdump had a buffer\n overflow in print-mpls.c:mpls_print() (bsc#1020940).\n\n - CVE-2016-7932: The PIM parser in tcpdump had a buffer\n overflow in print-pim.c:pimv2_check_checksum()\n (bsc#1020940).\n\n - CVE-2016-7933: The PPP parser in tcpdump had a buffer\n overflow in print-ppp.c:ppp_hdlc_if_print()\n (bsc#1020940).\n\n - CVE-2016-7934: The RTCP parser in tcpdump had a buffer\n overflow in print-udp.c:rtcp_print() (bsc#1020940).\n\n - CVE-2016-7935: The RTP parser in tcpdump had a buffer\n overflow in print-udp.c:rtp_print() (bsc#1020940).\n\n - CVE-2016-7936: The UDP parser in tcpdump had a buffer\n overflow in print-udp.c:udp_print() (bsc#1020940).\n\n - CVE-2016-7937: The VAT parser in tcpdump had a buffer\n overflow in print-udp.c:vat_print() (bsc#1020940).\n\n - CVE-2016-7938: The ZeroMQ parser in tcpdump had an\n integer overflow in print-zeromq.c:zmtp1_print_frame()\n (bsc#1020940).\n\n - CVE-2016-7939: The GRE parser in tcpdump had a buffer\n overflow in print-gre.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7940: The STP parser in tcpdump had a buffer\n overflow in print-stp.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7973: The AppleTalk parser in tcpdump had a\n buffer overflow in print-atalk.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7974: The IP parser in tcpdump had a buffer\n overflow in print-ip.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7975: The TCP parser in tcpdump had a buffer\n overflow in print-tcp.c:tcp_print() (bsc#1020940).\n\n - CVE-2016-7983: The BOOTP parser in tcpdump had a buffer\n overflow in print-bootp.c:bootp_print() (bsc#1020940).\n\n - CVE-2016-7984: The TFTP parser in tcpdump had a buffer\n overflow in print-tftp.c:tftp_print() (bsc#1020940).\n\n - CVE-2016-7985: The CALM FAST parser in tcpdump had a\n buffer overflow in print-calm-fast.c:calm_fast_print()\n (bsc#1020940).\n\n - CVE-2016-7986: The GeoNetworking parser in tcpdump had a\n buffer overflow in print-geonet.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7992: The Classical IP over ATM parser in\n tcpdump had a buffer overflow in\n print-cip.c:cip_if_print() (bsc#1020940).\n\n - CVE-2016-7993: A bug in util-print.c:relts_print() in\n tcpdump could cause a buffer overflow in multiple\n protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight\n resolver protocol, PIM) (bsc#1020940).\n\n - CVE-2016-8574: The FRF.15 parser in tcpdump had a buffer\n overflow in print-fr.c:frf15_print() (bsc#1020940).\n\n - CVE-2016-8575: The Q.933 parser in tcpdump had a buffer\n overflow in print-fr.c:q933_print(), a different\n vulnerability than CVE-2017-5482 (bsc#1020940).\n\n - CVE-2017-5202: The ISO CLNS parser in tcpdump had a\n buffer overflow in print-isoclns.c:clnp_print()\n (bsc#1020940).\n\n - CVE-2017-5203: The BOOTP parser in tcpdump had a buffer\n overflow in print-bootp.c:bootp_print() (bsc#1020940).\n\n - CVE-2017-5204: The IPv6 parser in tcpdump had a buffer\n overflow in print-ip6.c:ip6_print() (bsc#1020940).\n\n - CVE-2017-5205: The ISAKMP parser in tcpdump had a buffer\n overflow in print-isakmp.c:ikev2_e_print()\n (bsc#1020940).\n\n - CVE-2017-5341: The OTV parser in tcpdump had a buffer\n overflow in print-otv.c:otv_print() (bsc#1020940).\n\n - CVE-2017-5342: In tcpdump a bug in multiple protocol\n parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE)\n could cause a buffer overflow in\n print-ether.c:ether_print() (bsc#1020940).\n\n - CVE-2017-5482: The Q.933 parser in tcpdump had a buffer\n overflow in print-fr.c:q933_print(), a different\n vulnerability than CVE-2016-8575 (bsc#1020940).\n\n - CVE-2017-5483: The SNMP parser in tcpdump had a buffer\n overflow in print-snmp.c:asn1_parse() (bsc#1020940).\n\n - CVE-2017-5484: The ATM parser in tcpdump had a buffer\n overflow in print-atm.c:sig_print() (bsc#1020940).\n\n - CVE-2017-5485: The ISO CLNS parser in tcpdump had a\n buffer overflow in addrtoname.c:lookup_nsap()\n (bsc#1020940).\n\n - CVE-2017-5486: The ISO CLNS parser in tcpdump had a\n buffer overflow in print-isoclns.c:clnp_print()\n (bsc#1020940).\n\n - CVE-2015-3138: Fixed potential denial of service in\n print-wb.c (bsc#927637).\n\n - CVE-2015-0261: Integer signedness error in the\n mobility_opt_print function in the IPv6 mobility printer\n in tcpdump allowed remote attackers to cause a denial of\n service (out-of-bounds read and crash) or possibly\n execute arbitrary code via a negative length value\n (bsc#922220).\n\n - CVE-2015-2153: The rpki_rtr_pdu_print function in\n print-rpki-rtr.c in the TCP printer in tcpdump allowed\n remote attackers to cause a denial of service\n (out-of-bounds read or write and crash) via a crafted\n header length in an RPKI-RTR Protocol Data Unit (PDU)\n (bsc#922221).\n\n - CVE-2015-2154: The osi_print_cksum function in\n print-isoclns.c in the ethernet printer in tcpdump\n allowed remote attackers to cause a denial of service\n (out-of-bounds read and crash) via a crafted (1) length,\n (2) offset, or (3) base pointer checksum value\n (bsc#922222).\n\n - CVE-2015-2155: The force printer in tcpdump allowed\n remote attackers to cause a denial of service (crash)\n and possibly execute arbitrary code via unspecified\n vectors (bsc#922223).\n\n - CVE-2014-8767: Integer underflow in the olsr_print\n function in tcpdump 3.9.6 when in verbose mode, allowed\n remote attackers to cause a denial of service (crash)\n via a crafted length value in an OLSR frame\n (bsc#905870).\n\n - CVE-2014-8768: Multiple Integer underflows in the\n geonet_print function in tcpdump when run in verbose\n mode, allowed remote attackers to cause a denial of\n service (segmentation fault and crash) via a crafted\n length value in a Geonet frame (bsc#905871).\n\n - CVE-2014-8769: tcpdump might have allowed remote\n attackers to obtain sensitive information from memory or\n cause a denial of service (packet loss or segmentation\n fault) via a crafted Ad hoc On-Demand Distance Vector\n (AODV) packet, which triggers an out-of-bounds memory\n access (bsc#905872). These non-security issues were\n fixed in tcpdump :\n\n - PPKI to Router Protocol: Fix Segmentation Faults and\n other problems\n\n - RPKI to Router Protocol: print strings with fn_printn()\n\n - Added a short option '#', same as long option '--number'\n\n - nflog, mobile, forces, pptp, AODV, AHCP, IPv6, OSPFv4,\n RPL, DHCPv6 enhancements/fixes\n\n - M3UA decode added.\n\n - Added bittok2str().\n\n - A number of unaligned access faults fixed\n\n - The -A flag does not consider CR to be printable anymore\n\n - fx.lebail took over coverity baby sitting\n\n - Default snapshot size increased to 256K for accomodate\n USB captures These non-security issues were fixed in\n libpcap :\n\n - Provide a -devel-static subpackage that contains the\n static libraries and all the extra dependencies which\n are not needed for dynamic linking.\n\n - Fix handling of packet count in the TPACKET_V3 inner\n loop\n\n - Filter out duplicate looped back CAN frames.\n\n - Fix the handling of loopback filters for IPv6 packets.\n\n - Add a link-layer header type for RDS (IEC 62106) groups.\n\n - Handle all CAN captures with pcap-linux.c, in cooked\n mode.\n\n - Removes the need for the 'host-endian' link-layer header\n type.\n\n - Have separate DLTs for big-endian and host-endian\n SocketCAN headers.\n\n - Properly check for sock_recv() errors.\n\n - Re-impose some of Winsock's limitations on sock_recv().\n\n - Replace sprintf() with pcap_snprintf().\n\n - Fix signature of pcap_stats_ex_remote().\n\n - Have rpcap_remoteact_getsock() return a SOCKET and\n supply an 'is active' flag.\n\n - Clean up {DAG, Septel, Myricom SNF}-only builds.\n\n - pcap_create_interface() needs the interface name on\n Linux.\n\n - Clean up hardware time stamp support: the 'any' device\n does not support any time stamp types.\n\n - Recognize 802.1ad nested VLAN tag in vlan filter.\n\n - Support for filtering Geneve encapsulated packets.\n\n - Fix handling of zones for BPF on Solaris\n\n - Added bpf_filter1() with extensions\n\n - EBUSY can now be returned by SNFv3 code.\n\n - Don't crash on filters testing a non-existent link-layer\n type field.\n\n - Fix sending in non-blocking mode on Linux with\n memory-mapped capture.\n\n - Fix timestamps when reading pcap-ng files on big-endian\n machines.\n\n - Fixes for byte order issues with NFLOG captures\n\n - Handle using cooked mode for DLT_NETLINK in\n activate_new().\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1020940\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1035686\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=905870\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=905871\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=905872\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=922220\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=922221\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=922222\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=922223\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=927637\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2014-8767/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2014-8768/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2014-8769/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-0261/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-2153/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-2154/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-2155/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2015-3138/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7922/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7923/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7924/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7925/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7926/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7927/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7928/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7929/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7930/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7931/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7932/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7933/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7934/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7935/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7936/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7937/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7938/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7939/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7940/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7973/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7974/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7975/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7983/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7984/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7985/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7986/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7992/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-7993/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-8574/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2016-8575/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5202/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5203/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5204/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5205/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5341/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5342/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5482/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5483/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5484/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5485/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5486/\"\n );\n # https://www.suse.com/support/update/announcement/2017/suse-su-20171110-1/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?1175e4bf\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use YaST online_update.\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Workstation Extension 12-SP2:zypper in -t patch\nSUSE-SLE-WE-12-SP2-2017-644=1\n\nSUSE Linux Enterprise Workstation Extension 12-SP1:zypper in -t patch\nSUSE-SLE-WE-12-SP1-2017-644=1\n\nSUSE Linux Enterprise Software Development Kit 12-SP2:zypper in -t\npatch SUSE-SLE-SDK-12-SP2-2017-644=1\n\nSUSE Linux Enterprise Software Development Kit 12-SP1:zypper in -t\npatch SUSE-SLE-SDK-12-SP1-2017-644=1\n\nSUSE Linux Enterprise Server for Raspberry Pi 12-SP2:zypper in -t\npatch SUSE-SLE-RPI-12-SP2-2017-644=1\n\nSUSE Linux Enterprise Server 12-SP2:zypper in -t patch\nSUSE-SLE-SERVER-12-SP2-2017-644=1\n\nSUSE Linux Enterprise Server 12-SP1:zypper in -t patch\nSUSE-SLE-SERVER-12-SP1-2017-644=1\n\nSUSE Linux Enterprise Desktop 12-SP2:zypper in -t patch\nSUSE-SLE-DESKTOP-12-SP2-2017-644=1\n\nSUSE Linux Enterprise Desktop 12-SP1:zypper in -t patch\nSUSE-SLE-DESKTOP-12-SP1-2017-644=1\n\nTo bring your system up-to-date, use 'zypper patch'.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libpcap-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libpcap1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libpcap1-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:tcpdump-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:tcpdump-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/11/20\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/04/26\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/04/27\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = pregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(SLED12|SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLED12 / SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! preg(pattern:\"^(1|2)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP1/2\", os_ver + \" SP\" + sp);\nif (os_ver == \"SLED12\" && (! preg(pattern:\"^(1|2)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLED12 SP1/2\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libpcap-debugsource-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libpcap1-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libpcap1-debuginfo-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"tcpdump-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"tcpdump-debuginfo-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"tcpdump-debugsource-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libpcap-debugsource-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libpcap1-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libpcap1-debuginfo-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"tcpdump-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"tcpdump-debuginfo-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"tcpdump-debugsource-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libpcap-debugsource-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libpcap1-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libpcap1-32bit-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libpcap1-debuginfo-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libpcap1-debuginfo-32bit-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"tcpdump-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"tcpdump-debuginfo-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"tcpdump-debugsource-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libpcap-debugsource-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libpcap1-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libpcap1-32bit-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libpcap1-debuginfo-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libpcap1-debuginfo-32bit-1.8.1-9.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"tcpdump-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"tcpdump-debuginfo-4.9.0-13.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"tcpdump-debugsource-4.9.0-13.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"tcpdump / libpcap\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-02T15:33:52", "description": "This update for tcpdump to version 4.9.0 and libpcap to version 1.8.1 fixes the several issues.\n\nThese security issues were fixed in tcpdump :\n\n - CVE-2016-7922: The AH parser in tcpdump had a buffer overflow in print-ah.c:ah_print() (bsc#1020940).\n\n - CVE-2016-7923: The ARP parser in tcpdump had a buffer overflow in print-arp.c:arp_print() (bsc#1020940).\n\n - CVE-2016-7924: The ATM parser in tcpdump had a buffer overflow in print-atm.c:oam_print() (bsc#1020940).\n\n - CVE-2016-7925: The compressed SLIP parser in tcpdump had a buffer overflow in print-sl.c:sl_if_print() (bsc#1020940).\n\n - CVE-2016-7926: The Ethernet parser in tcpdump had a buffer overflow in print-ether.c:ethertype_print() (bsc#1020940).\n\n - CVE-2016-7927: The IEEE 802.11 parser in tcpdump had a buffer overflow in print-802_11.c:ieee802_11_radio_print() (bsc#1020940).\n\n - CVE-2016-7928: The IPComp parser in tcpdump had a buffer overflow in print-ipcomp.c:ipcomp_print() (bsc#1020940).\n\n - CVE-2016-7929: The Juniper PPPoE ATM parser in tcpdump had a buffer overflow in print-juniper.c:juniper_parse_header() (bsc#1020940).\n\n - CVE-2016-7930: The LLC/SNAP parser in tcpdump had a buffer overflow in print-llc.c:llc_print() (bsc#1020940).\n\n - CVE-2016-7931: The MPLS parser in tcpdump had a buffer overflow in print-mpls.c:mpls_print() (bsc#1020940).\n\n - CVE-2016-7932: The PIM parser in tcpdump had a buffer overflow in print-pim.c:pimv2_check_checksum() (bsc#1020940).\n\n - CVE-2016-7933: The PPP parser in tcpdump had a buffer overflow in print-ppp.c:ppp_hdlc_if_print() (bsc#1020940).\n\n - CVE-2016-7934: The RTCP parser in tcpdump had a buffer overflow in print-udp.c:rtcp_print() (bsc#1020940).\n\n - CVE-2016-7935: The RTP parser in tcpdump had a buffer overflow in print-udp.c:rtp_print() (bsc#1020940).\n\n - CVE-2016-7936: The UDP parser in tcpdump had a buffer overflow in print-udp.c:udp_print() (bsc#1020940).\n\n - CVE-2016-7937: The VAT parser in tcpdump had a buffer overflow in print-udp.c:vat_print() (bsc#1020940).\n\n - CVE-2016-7938: The ZeroMQ parser in tcpdump had an integer overflow in print-zeromq.c:zmtp1_print_frame() (bsc#1020940).\n\n - CVE-2016-7939: The GRE parser in tcpdump had a buffer overflow in print-gre.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7940: The STP parser in tcpdump had a buffer overflow in print-stp.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7973: The AppleTalk parser in tcpdump had a buffer overflow in print-atalk.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7974: The IP parser in tcpdump had a buffer overflow in print-ip.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7975: The TCP parser in tcpdump had a buffer overflow in print-tcp.c:tcp_print() (bsc#1020940).\n\n - CVE-2016-7983: The BOOTP parser in tcpdump had a buffer overflow in print-bootp.c:bootp_print() (bsc#1020940).\n\n - CVE-2016-7984: The TFTP parser in tcpdump had a buffer overflow in print-tftp.c:tftp_print() (bsc#1020940).\n\n - CVE-2016-7985: The CALM FAST parser in tcpdump had a buffer overflow in print-calm-fast.c:calm_fast_print() (bsc#1020940).\n\n - CVE-2016-7986: The GeoNetworking parser in tcpdump had a buffer overflow in print-geonet.c, multiple functions (bsc#1020940).\n\n - CVE-2016-7992: The Classical IP over ATM parser in tcpdump had a buffer overflow in print-cip.c:cip_if_print() (bsc#1020940).\n\n - CVE-2016-7993: A bug in util-print.c:relts_print() in tcpdump could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM) (bsc#1020940).\n\n - CVE-2016-8574: The FRF.15 parser in tcpdump had a buffer overflow in print-fr.c:frf15_print() (bsc#1020940).\n\n - CVE-2016-8575: The Q.933 parser in tcpdump had a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482 (bsc#1020940).\n\n - CVE-2017-5202: The ISO CLNS parser in tcpdump had a buffer overflow in print-isoclns.c:clnp_print() (bsc#1020940).\n\n - CVE-2017-5203: The BOOTP parser in tcpdump had a buffer overflow in print-bootp.c:bootp_print() (bsc#1020940).\n\n - CVE-2017-5204: The IPv6 parser in tcpdump had a buffer overflow in print-ip6.c:ip6_print() (bsc#1020940).\n\n - CVE-2017-5205: The ISAKMP parser in tcpdump had a buffer overflow in print-isakmp.c:ikev2_e_print() (bsc#1020940).\n\n - CVE-2017-5341: The OTV parser in tcpdump had a buffer overflow in print-otv.c:otv_print() (bsc#1020940).\n\n - CVE-2017-5342: In tcpdump a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print() (bsc#1020940).\n\n - CVE-2017-5482: The Q.933 parser in tcpdump had a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575 (bsc#1020940).\n\n - CVE-2017-5483: The SNMP parser in tcpdump had a buffer overflow in print-snmp.c:asn1_parse() (bsc#1020940).\n\n - CVE-2017-5484: The ATM parser in tcpdump had a buffer overflow in print-atm.c:sig_print() (bsc#1020940).\n\n - CVE-2017-5485: The ISO CLNS parser in tcpdump had a buffer overflow in addrtoname.c:lookup_nsap() (bsc#1020940).\n\n - CVE-2017-5486: The ISO CLNS parser in tcpdump had a buffer overflow in print-isoclns.c:clnp_print() (bsc#1020940).\n\n - CVE-2015-3138: Fixed potential denial of service in print-wb.c (bsc#927637).\n\n - CVE-2015-0261: Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value (bsc#922220).\n\n - CVE-2015-2153: The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU) (bsc#922221).\n\n - CVE-2015-2154: The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump allowed remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value (bsc#922222).\n\n - CVE-2015-2155: The force printer in tcpdump allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors (bsc#922223).\n\n - CVE-2014-8767: Integer underflow in the olsr_print function in tcpdump 3.9.6 when in verbose mode, allowed remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame (bsc#905870).\n\n - CVE-2014-8768: Multiple Integer underflows in the geonet_print function in tcpdump when run in verbose mode, allowed remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame (bsc#905871).\n\n - CVE-2014-8769: tcpdump might have allowed remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access (bsc#905872).\n\nThese non-security issues were fixed in tcpdump :\n\n - PPKI to Router Protocol: Fix Segmentation Faults and other problems\n\n - RPKI to Router Protocol: print strings with fn_printn()\n\n - Added a short option '#', same as long option '--number'\n\n - nflog, mobile, forces, pptp, AODV, AHCP, IPv6, OSPFv4, RPL, DHCPv6 enhancements/fixes\n\n - M3UA decode added.\n\n - Added bittok2str().\n\n - A number of unaligned access faults fixed\n\n - The -A flag does not consider CR to be printable anymore\n\n - fx.lebail took over coverity baby sitting\n\n - Default snapshot size increased to 256K for accomodate USB captures\n\nThese non-security issues were fixed in libpcap :\n\n - Provide a -devel-static subpackage that contains the static libraries and all the extra dependencies which are not needed for dynamic linking.\n\n - Fix handling of packet count in the TPACKET_V3 inner loop\n\n - Filter out duplicate looped back CAN frames.\n\n - Fix the handling of loopback filters for IPv6 packets.\n\n - Add a link-layer header type for RDS (IEC 62106) groups.\n\n - Handle all CAN captures with pcap-linux.c, in cooked mode.\n\n - Removes the need for the 'host-endian' link-layer header type.\n\n - Have separate DLTs for big-endian and host-endian SocketCAN headers.\n\n - Properly check for sock_recv() errors.\n\n - Re-impose some of Winsock's limitations on sock_recv().\n\n - Replace sprintf() with pcap_snprintf().\n\n - Fix signature of pcap_stats_ex_remote().\n\n - Have rpcap_remoteact_getsock() return a SOCKET and supply an 'is active' flag.\n\n - Clean up (DAG, Septel, Myricom SNF)-only builds.\n\n - pcap_create_interface() needs the interface name on Linux.\n\n - Clean up hardware time stamp support: the 'any' device does not support any time stamp types.\n\n - Recognize 802.1ad nested VLAN tag in vlan filter.\n\n - Support for filtering Geneve encapsulated packets.\n\n - Fix handling of zones for BPF on Solaris\n\n - Added bpf_filter1() with extensions\n\n - EBUSY can now be returned by SNFv3 code.\n\n - Don't crash on filters testing a non-existent link-layer type field.\n\n - Fix sending in non-blocking mode on Linux with memory-mapped capture.\n\n - Fix timestamps when reading pcap-ng files on big-endian machines.\n\n - Fixes for byte order issues with NFLOG captures\n\n - Handle using cooked mode for DLT_NETLINK in activate_new().\n\nThis update was imported from the SUSE:SLE-12:Update update project.", "cvss3": {}, "published": "2017-05-09T00:00:00", "type": "nessus", "title": "openSUSE Security Update : tcpdump / libpcap (openSUSE-2017-557)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2014-8767", "CVE-2014-8768", "CVE-2014-8769", "CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2015-3138", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2021-01-19T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:libpcap-debugsource", "p-cpe:/a:novell:opensuse:libpcap-devel", "p-cpe:/a:novell:opensuse:libpcap-devel-32bit", "p-cpe:/a:novell:opensuse:libpcap-devel-static", "p-cpe:/a:novell:opensuse:libpcap1", "p-cpe:/a:novell:opensuse:libpcap1-32bit", "p-cpe:/a:novell:opensuse:libpcap1-debuginfo", "p-cpe:/a:novell:opensuse:libpcap1-debuginfo-32bit", "p-cpe:/a:novell:opensuse:tcpdump", "p-cpe:/a:novell:opensuse:tcpdump-debuginfo", "p-cpe:/a:novell:opensuse:tcpdump-debugsource", "cpe:/o:novell:opensuse:42.1", "cpe:/o:novell:opensuse:42.2"], "id": "OPENSUSE-2017-557.NASL", "href": "https://www.tenable.com/plugins/nessus/100040", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2017-557.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(100040);\n script_version(\"3.6\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2014-8767\", \"CVE-2014-8768\", \"CVE-2014-8769\", \"CVE-2015-0261\", \"CVE-2015-2153\", \"CVE-2015-2154\", \"CVE-2015-2155\", \"CVE-2015-3138\", \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n\n script_name(english:\"openSUSE Security Update : tcpdump / libpcap (openSUSE-2017-557)\");\n script_summary(english:\"Check for the openSUSE-2017-557 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update for tcpdump to version 4.9.0 and libpcap to version 1.8.1\nfixes the several issues.\n\nThese security issues were fixed in tcpdump :\n\n - CVE-2016-7922: The AH parser in tcpdump had a buffer\n overflow in print-ah.c:ah_print() (bsc#1020940).\n\n - CVE-2016-7923: The ARP parser in tcpdump had a buffer\n overflow in print-arp.c:arp_print() (bsc#1020940).\n\n - CVE-2016-7924: The ATM parser in tcpdump had a buffer\n overflow in print-atm.c:oam_print() (bsc#1020940).\n\n - CVE-2016-7925: The compressed SLIP parser in tcpdump had\n a buffer overflow in print-sl.c:sl_if_print()\n (bsc#1020940).\n\n - CVE-2016-7926: The Ethernet parser in tcpdump had a\n buffer overflow in print-ether.c:ethertype_print()\n (bsc#1020940).\n\n - CVE-2016-7927: The IEEE 802.11 parser in tcpdump had a\n buffer overflow in\n print-802_11.c:ieee802_11_radio_print() (bsc#1020940).\n\n - CVE-2016-7928: The IPComp parser in tcpdump had a buffer\n overflow in print-ipcomp.c:ipcomp_print() (bsc#1020940).\n\n - CVE-2016-7929: The Juniper PPPoE ATM parser in tcpdump\n had a buffer overflow in\n print-juniper.c:juniper_parse_header() (bsc#1020940).\n\n - CVE-2016-7930: The LLC/SNAP parser in tcpdump had a\n buffer overflow in print-llc.c:llc_print()\n (bsc#1020940).\n\n - CVE-2016-7931: The MPLS parser in tcpdump had a buffer\n overflow in print-mpls.c:mpls_print() (bsc#1020940).\n\n - CVE-2016-7932: The PIM parser in tcpdump had a buffer\n overflow in print-pim.c:pimv2_check_checksum()\n (bsc#1020940).\n\n - CVE-2016-7933: The PPP parser in tcpdump had a buffer\n overflow in print-ppp.c:ppp_hdlc_if_print()\n (bsc#1020940).\n\n - CVE-2016-7934: The RTCP parser in tcpdump had a buffer\n overflow in print-udp.c:rtcp_print() (bsc#1020940).\n\n - CVE-2016-7935: The RTP parser in tcpdump had a buffer\n overflow in print-udp.c:rtp_print() (bsc#1020940).\n\n - CVE-2016-7936: The UDP parser in tcpdump had a buffer\n overflow in print-udp.c:udp_print() (bsc#1020940).\n\n - CVE-2016-7937: The VAT parser in tcpdump had a buffer\n overflow in print-udp.c:vat_print() (bsc#1020940).\n\n - CVE-2016-7938: The ZeroMQ parser in tcpdump had an\n integer overflow in print-zeromq.c:zmtp1_print_frame()\n (bsc#1020940).\n\n - CVE-2016-7939: The GRE parser in tcpdump had a buffer\n overflow in print-gre.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7940: The STP parser in tcpdump had a buffer\n overflow in print-stp.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7973: The AppleTalk parser in tcpdump had a\n buffer overflow in print-atalk.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7974: The IP parser in tcpdump had a buffer\n overflow in print-ip.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7975: The TCP parser in tcpdump had a buffer\n overflow in print-tcp.c:tcp_print() (bsc#1020940).\n\n - CVE-2016-7983: The BOOTP parser in tcpdump had a buffer\n overflow in print-bootp.c:bootp_print() (bsc#1020940).\n\n - CVE-2016-7984: The TFTP parser in tcpdump had a buffer\n overflow in print-tftp.c:tftp_print() (bsc#1020940).\n\n - CVE-2016-7985: The CALM FAST parser in tcpdump had a\n buffer overflow in print-calm-fast.c:calm_fast_print()\n (bsc#1020940).\n\n - CVE-2016-7986: The GeoNetworking parser in tcpdump had a\n buffer overflow in print-geonet.c, multiple functions\n (bsc#1020940).\n\n - CVE-2016-7992: The Classical IP over ATM parser in\n tcpdump had a buffer overflow in\n print-cip.c:cip_if_print() (bsc#1020940).\n\n - CVE-2016-7993: A bug in util-print.c:relts_print() in\n tcpdump could cause a buffer overflow in multiple\n protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight\n resolver protocol, PIM) (bsc#1020940).\n\n - CVE-2016-8574: The FRF.15 parser in tcpdump had a buffer\n overflow in print-fr.c:frf15_print() (bsc#1020940).\n\n - CVE-2016-8575: The Q.933 parser in tcpdump had a buffer\n overflow in print-fr.c:q933_print(), a different\n vulnerability than CVE-2017-5482 (bsc#1020940).\n\n - CVE-2017-5202: The ISO CLNS parser in tcpdump had a\n buffer overflow in print-isoclns.c:clnp_print()\n (bsc#1020940).\n\n - CVE-2017-5203: The BOOTP parser in tcpdump had a buffer\n overflow in print-bootp.c:bootp_print() (bsc#1020940).\n\n - CVE-2017-5204: The IPv6 parser in tcpdump had a buffer\n overflow in print-ip6.c:ip6_print() (bsc#1020940).\n\n - CVE-2017-5205: The ISAKMP parser in tcpdump had a buffer\n overflow in print-isakmp.c:ikev2_e_print()\n (bsc#1020940).\n\n - CVE-2017-5341: The OTV parser in tcpdump had a buffer\n overflow in print-otv.c:otv_print() (bsc#1020940).\n\n - CVE-2017-5342: In tcpdump a bug in multiple protocol\n parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE)\n could cause a buffer overflow in\n print-ether.c:ether_print() (bsc#1020940).\n\n - CVE-2017-5482: The Q.933 parser in tcpdump had a buffer\n overflow in print-fr.c:q933_print(), a different\n vulnerability than CVE-2016-8575 (bsc#1020940).\n\n - CVE-2017-5483: The SNMP parser in tcpdump had a buffer\n overflow in print-snmp.c:asn1_parse() (bsc#1020940).\n\n - CVE-2017-5484: The ATM parser in tcpdump had a buffer\n overflow in print-atm.c:sig_print() (bsc#1020940).\n\n - CVE-2017-5485: The ISO CLNS parser in tcpdump had a\n buffer overflow in addrtoname.c:lookup_nsap()\n (bsc#1020940).\n\n - CVE-2017-5486: The ISO CLNS parser in tcpdump had a\n buffer overflow in print-isoclns.c:clnp_print()\n (bsc#1020940).\n\n - CVE-2015-3138: Fixed potential denial of service in\n print-wb.c (bsc#927637).\n\n - CVE-2015-0261: Integer signedness error in the\n mobility_opt_print function in the IPv6 mobility printer\n in tcpdump allowed remote attackers to cause a denial of\n service (out-of-bounds read and crash) or possibly\n execute arbitrary code via a negative length value\n (bsc#922220).\n\n - CVE-2015-2153: The rpki_rtr_pdu_print function in\n print-rpki-rtr.c in the TCP printer in tcpdump allowed\n remote attackers to cause a denial of service\n (out-of-bounds read or write and crash) via a crafted\n header length in an RPKI-RTR Protocol Data Unit (PDU)\n (bsc#922221).\n\n - CVE-2015-2154: The osi_print_cksum function in\n print-isoclns.c in the ethernet printer in tcpdump\n allowed remote attackers to cause a denial of service\n (out-of-bounds read and crash) via a crafted (1) length,\n (2) offset, or (3) base pointer checksum value\n (bsc#922222).\n\n - CVE-2015-2155: The force printer in tcpdump allowed\n remote attackers to cause a denial of service (crash)\n and possibly execute arbitrary code via unspecified\n vectors (bsc#922223).\n\n - CVE-2014-8767: Integer underflow in the olsr_print\n function in tcpdump 3.9.6 when in verbose mode, allowed\n remote attackers to cause a denial of service (crash)\n via a crafted length value in an OLSR frame\n (bsc#905870).\n\n - CVE-2014-8768: Multiple Integer underflows in the\n geonet_print function in tcpdump when run in verbose\n mode, allowed remote attackers to cause a denial of\n service (segmentation fault and crash) via a crafted\n length value in a Geonet frame (bsc#905871).\n\n - CVE-2014-8769: tcpdump might have allowed remote\n attackers to obtain sensitive information from memory or\n cause a denial of service (packet loss or segmentation\n fault) via a crafted Ad hoc On-Demand Distance Vector\n (AODV) packet, which triggers an out-of-bounds memory\n access (bsc#905872).\n\nThese non-security issues were fixed in tcpdump :\n\n - PPKI to Router Protocol: Fix Segmentation Faults and\n other problems\n\n - RPKI to Router Protocol: print strings with fn_printn()\n\n - Added a short option '#', same as long option '--number'\n\n - nflog, mobile, forces, pptp, AODV, AHCP, IPv6, OSPFv4,\n RPL, DHCPv6 enhancements/fixes\n\n - M3UA decode added.\n\n - Added bittok2str().\n\n - A number of unaligned access faults fixed\n\n - The -A flag does not consider CR to be printable anymore\n\n - fx.lebail took over coverity baby sitting\n\n - Default snapshot size increased to 256K for accomodate\n USB captures\n\nThese non-security issues were fixed in libpcap :\n\n - Provide a -devel-static subpackage that contains the\n static libraries and all the extra dependencies which\n are not needed for dynamic linking.\n\n - Fix handling of packet count in the TPACKET_V3 inner\n loop\n\n - Filter out duplicate looped back CAN frames.\n\n - Fix the handling of loopback filters for IPv6 packets.\n\n - Add a link-layer header type for RDS (IEC 62106) groups.\n\n - Handle all CAN captures with pcap-linux.c, in cooked\n mode.\n\n - Removes the need for the 'host-endian' link-layer header\n type.\n\n - Have separate DLTs for big-endian and host-endian\n SocketCAN headers.\n\n - Properly check for sock_recv() errors.\n\n - Re-impose some of Winsock's limitations on sock_recv().\n\n - Replace sprintf() with pcap_snprintf().\n\n - Fix signature of pcap_stats_ex_remote().\n\n - Have rpcap_remoteact_getsock() return a SOCKET and\n supply an 'is active' flag.\n\n - Clean up (DAG, Septel, Myricom SNF)-only builds.\n\n - pcap_create_interface() needs the interface name on\n Linux.\n\n - Clean up hardware time stamp support: the 'any' device\n does not support any time stamp types.\n\n - Recognize 802.1ad nested VLAN tag in vlan filter.\n\n - Support for filtering Geneve encapsulated packets.\n\n - Fix handling of zones for BPF on Solaris\n\n - Added bpf_filter1() with extensions\n\n - EBUSY can now be returned by SNFv3 code.\n\n - Don't crash on filters testing a non-existent link-layer\n type field.\n\n - Fix sending in non-blocking mode on Linux with\n memory-mapped capture.\n\n - Fix timestamps when reading pcap-ng files on big-endian\n machines.\n\n - Fixes for byte order issues with NFLOG captures\n\n - Handle using cooked mode for DLT_NETLINK in\n activate_new().\n\nThis update was imported from the SUSE:SLE-12:Update update project.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1020940\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1035686\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=905870\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=905871\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=905872\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=922220\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=922221\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=922222\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=922223\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=927637\"\n );\n # https://features.opensuse.org/322955\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://features.opensuse.org/\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected tcpdump / libpcap packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libpcap-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libpcap-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libpcap-devel-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libpcap-devel-static\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libpcap1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libpcap1-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libpcap1-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libpcap1-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:tcpdump\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:tcpdump-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:tcpdump-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:42.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:42.2\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/11/20\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/05/08\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/05/09\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE42\\.1|SUSE42\\.2)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"42.1 / 42.2\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(i586|i686|x86_64)$\") audit(AUDIT_ARCH_NOT, \"i586 / i686 / x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libpcap-debugsource-1.8.1-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libpcap-devel-1.8.1-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libpcap-devel-static-1.8.1-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libpcap1-1.8.1-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libpcap1-debuginfo-1.8.1-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"tcpdump-4.9.0-7.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"tcpdump-debuginfo-4.9.0-7.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"tcpdump-debugsource-4.9.0-7.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libpcap-devel-32bit-1.8.1-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libpcap1-32bit-1.8.1-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libpcap1-debuginfo-32bit-1.8.1-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libpcap-debugsource-1.8.1-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libpcap-devel-1.8.1-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libpcap-devel-static-1.8.1-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libpcap1-1.8.1-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libpcap1-debuginfo-1.8.1-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libpcap-devel-32bit-1.8.1-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libpcap1-32bit-1.8.1-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libpcap1-debuginfo-32bit-1.8.1-7.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"tcpdump-4.9.0-6.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"tcpdump-debuginfo-4.9.0-6.3.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"tcpdump-debugsource-4.9.0-6.3.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"libpcap-debugsource / libpcap-devel / libpcap-devel-32bit / etc\");\n}\n", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2023-12-01T16:34:54", "description": "The remote host is running a version of macOS that is 10.12.x prior to 10.12.4. It is, therefore, affected by multiple vulnerabilities in multiple components, some of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these remote code execution vulnerabilities by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user. The affected components are as follows :\n\n - apache\n - apache_mod_php\n - AppleGraphicsPowerManagement\n - AppleRAID\n - Audio\n - Bluetooth\n - Carbon\n - CoreGraphics\n - CoreMedia\n - CoreText\n - curl\n - EFI\n - FinderKit\n - FontParser\n - HTTPProtocol\n - Hypervisor\n - iBooks\n - ImageIO\n - Intel Graphics Driver\n - IOATAFamily\n - IOFireWireAVC\n - IOFireWireFamily\n - Kernel\n - Keyboards\n - libarchive\n - libc++abi\n - LibreSSL\n - MCX Client\n - Menus\n - Multi-Touch\n - OpenSSH\n - OpenSSL\n - Printing\n - python\n - QuickTime\n - Security\n - SecurityFoundation\n - sudo\n - System Integrity Protection\n - tcpdump\n - tiffutil\n - WebKit", "cvss3": {}, "published": "2017-03-31T00:00:00", "type": "nessus", "title": "macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-0736", "CVE-2016-10009", "CVE-2016-10010", "CVE-2016-10011", "CVE-2016-10012", "CVE-2016-10158", "CVE-2016-10159", "CVE-2016-10160", "CVE-2016-10161", "CVE-2016-2161", "CVE-2016-3619", "CVE-2016-4688", "CVE-2016-5387", "CVE-2016-5636", "CVE-2016-7056", "CVE-2016-7585", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2016-8740", "CVE-2016-8743", "CVE-2016-9533", "CVE-2016-9535", "CVE-2016-9536", "CVE-2016-9537", "CVE-2016-9538", "CVE-2016-9539", "CVE-2016-9540", "CVE-2016-9586", "CVE-2016-9935", "CVE-2017-2379", "CVE-2017-2381", "CVE-2017-2388", "CVE-2017-2390", "CVE-2017-2398", "CVE-2017-2401", "CVE-2017-2402", "CVE-2017-2403", "CVE-2017-2406", "CVE-2017-2407", "CVE-2017-2408", "CVE-2017-2409", "CVE-2017-2410", "CVE-2017-2413", "CVE-2017-2416", "CVE-2017-2417", "CVE-2017-2418", "CVE-2017-2420", "CVE-2017-2421", "CVE-2017-2422", "CVE-2017-2423", "CVE-2017-2425", "CVE-2017-2426", "CVE-2017-2427", "CVE-2017-2428", "CVE-2017-2429", "CVE-2017-2430", "CVE-2017-2431", "CVE-2017-2432", "CVE-2017-2435", "CVE-2017-2436", "CVE-2017-2437", "CVE-2017-2438", "CVE-2017-2439", "CVE-2017-2440", "CVE-2017-2441", "CVE-2017-2443", "CVE-2017-2448", "CVE-2017-2449", "CVE-2017-2450", "CVE-2017-2451", "CVE-2017-2456", "CVE-2017-2458", "CVE-2017-2461", "CVE-2017-2462", "CVE-2017-2467", "CVE-2017-2472", "CVE-2017-2473", "CVE-2017-2474", "CVE-2017-2477", "CVE-2017-2478", "CVE-2017-2482", "CVE-2017-2483", "CVE-2017-2485", "CVE-2017-2487", "CVE-2017-2489", "CVE-2017-2490", "CVE-2017-5029", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486", "CVE-2017-6974", "CVE-2017-7070"], "modified": "2019-11-13T00:00:00", "cpe": ["cpe:/o:apple:macos"], "id": "MACOS_10_12_4.NASL", "href": "https://www.tenable.com/plugins/nessus/99134", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(99134);\n script_version(\"1.9\");\n script_cvs_date(\"Date: 2019/11/13\");\n\n script_cve_id(\n \"CVE-2016-0736\",\n \"CVE-2016-2161\",\n \"CVE-2016-3619\",\n \"CVE-2016-4688\",\n \"CVE-2016-5387\",\n \"CVE-2016-5636\",\n \"CVE-2016-7056\",\n \"CVE-2016-7585\",\n \"CVE-2016-7922\",\n \"CVE-2016-7923\",\n \"CVE-2016-7924\",\n \"CVE-2016-7925\",\n \"CVE-2016-7926\",\n \"CVE-2016-7927\",\n \"CVE-2016-7928\",\n \"CVE-2016-7929\",\n \"CVE-2016-7930\",\n \"CVE-2016-7931\",\n \"CVE-2016-7932\",\n \"CVE-2016-7933\",\n \"CVE-2016-7934\",\n \"CVE-2016-7935\",\n \"CVE-2016-7936\",\n \"CVE-2016-7937\",\n \"CVE-2016-7938\",\n \"CVE-2016-7939\",\n \"CVE-2016-7940\",\n \"CVE-2016-7973\",\n \"CVE-2016-7974\",\n \"CVE-2016-7975\",\n \"CVE-2016-7983\",\n \"CVE-2016-7984\",\n \"CVE-2016-7985\",\n \"CVE-2016-7986\",\n \"CVE-2016-7992\",\n \"CVE-2016-7993\",\n \"CVE-2016-8574\",\n \"CVE-2016-8575\",\n \"CVE-2016-8740\",\n \"CVE-2016-8743\",\n \"CVE-2016-9533\",\n \"CVE-2016-9535\",\n \"CVE-2016-9536\",\n \"CVE-2016-9537\",\n \"CVE-2016-9538\",\n \"CVE-2016-9539\",\n \"CVE-2016-9540\",\n \"CVE-2016-9586\",\n \"CVE-2016-9935\",\n \"CVE-2016-10009\",\n \"CVE-2016-10010\",\n \"CVE-2016-10011\",\n \"CVE-2016-10012\",\n \"CVE-2016-10158\",\n \"CVE-2016-10159\",\n \"CVE-2016-10160\",\n \"CVE-2016-10161\",\n \"CVE-2017-2379\",\n \"CVE-2017-2381\",\n \"CVE-2017-2388\",\n \"CVE-2017-2390\",\n \"CVE-2017-2398\",\n \"CVE-2017-2401\",\n \"CVE-2017-2402\",\n \"CVE-2017-2403\",\n \"CVE-2017-2406\",\n \"CVE-2017-2407\",\n \"CVE-2017-2408\",\n \"CVE-2017-2409\",\n \"CVE-2017-2410\",\n \"CVE-2017-2413\",\n \"CVE-2017-2416\",\n \"CVE-2017-2417\",\n \"CVE-2017-2418\",\n \"CVE-2017-2420\",\n \"CVE-2017-2421\",\n \"CVE-2017-2422\",\n \"CVE-2017-2423\",\n \"CVE-2017-2425\",\n \"CVE-2017-2426\",\n \"CVE-2017-2427\",\n \"CVE-2017-2428\",\n \"CVE-2017-2429\",\n \"CVE-2017-2430\",\n \"CVE-2017-2431\",\n \"CVE-2017-2432\",\n \"CVE-2017-2435\",\n \"CVE-2017-2436\",\n \"CVE-2017-2437\",\n \"CVE-2017-2438\",\n \"CVE-2017-2439\",\n \"CVE-2017-2440\",\n \"CVE-2017-2441\",\n \"CVE-2017-2443\",\n \"CVE-2017-2448\",\n \"CVE-2017-2449\",\n \"CVE-2017-2450\",\n \"CVE-2017-2451\",\n \"CVE-2017-2456\",\n \"CVE-2017-2458\",\n \"CVE-2017-2461\",\n \"CVE-2017-2462\",\n \"CVE-2017-2467\",\n \"CVE-2017-2472\",\n \"CVE-2017-2473\",\n \"CVE-2017-2474\",\n \"CVE-2017-2477\",\n \"CVE-2017-2478\",\n \"CVE-2017-2482\",\n \"CVE-2017-2483\",\n \"CVE-2017-2485\",\n \"CVE-2017-2487\",\n \"CVE-2017-2489\",\n \"CVE-2017-2490\",\n \"CVE-2017-5029\",\n \"CVE-2017-5202\",\n \"CVE-2017-5203\",\n \"CVE-2017-5204\",\n \"CVE-2017-5205\",\n \"CVE-2017-5341\",\n \"CVE-2017-5342\",\n \"CVE-2017-5482\",\n \"CVE-2017-5483\",\n \"CVE-2017-5484\",\n \"CVE-2017-5485\",\n \"CVE-2017-5486\",\n \"CVE-2017-6974\",\n \"CVE-2017-7070\"\n );\n script_bugtraq_id(\n 85919,\n 91247,\n 91816,\n 94572,\n 94650,\n 94742,\n 94744,\n 94745,\n 94746,\n 94747,\n 94753,\n 94754,\n 94846,\n 94968,\n 94972,\n 94975,\n 94977,\n 95019,\n 95076,\n 95077,\n 95078,\n 95375,\n 95764,\n 95768,\n 95774,\n 95783,\n 95852,\n 96767,\n 97132,\n 97134,\n 97137,\n 97140,\n 97146,\n 97147,\n 97300,\n 97301,\n 97303\n );\n script_xref(name:\"APPLE-SA\", value:\"APPLE-SA-2017-03-27-3\");\n script_xref(name:\"CERT\", value:\"797896\");\n script_xref(name:\"EDB-ID\", value:\"40961\");\n script_xref(name:\"EDB-ID\", value:\"40962\");\n\n script_name(english:\"macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)\");\n script_summary(english:\"Checks the version of macOS.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host is missing a macOS update that fixes multiple security\nvulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote host is running a version of macOS that is 10.12.x prior to\n10.12.4. It is, therefore, affected by multiple vulnerabilities in\nmultiple components, some of which are remote code execution\nvulnerabilities. An unauthenticated, remote attacker can exploit these\nremote code execution vulnerabilities by convincing a user to visit a\nspecially crafted website, resulting in the execution of arbitrary\ncode in the context of the current user. The affected components are\nas follows :\n\n - apache\n - apache_mod_php\n - AppleGraphicsPowerManagement\n - AppleRAID\n - Audio\n - Bluetooth\n - Carbon\n - CoreGraphics\n - CoreMedia\n - CoreText\n - curl\n - EFI\n - FinderKit\n - FontParser\n - HTTPProtocol\n - Hypervisor\n - iBooks\n - ImageIO\n - Intel Graphics Driver\n - IOATAFamily\n - IOFireWireAVC\n - IOFireWireFamily\n - Kernel\n - Keyboards\n - libarchive\n - libc++abi\n - LibreSSL\n - MCX Client\n - Menus\n - Multi-Touch\n - OpenSSH\n - OpenSSL\n - Printing\n - python\n - QuickTime\n - Security\n - SecurityFoundation\n - sudo\n - System Integrity Protection\n - tcpdump\n - tiffutil\n - WebKit\");\n script_set_attribute(attribute:\"see_also\", value:\"https://support.apple.com/en-us/HT207615\");\n # https://lists.apple.com/archives/security-announce/2017/Mar/msg00004.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?ddb4db4a\");\n script_set_attribute(attribute:\"see_also\", value:\"https://httpoxy.org\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to macOS version 10.12.4 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-5636\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/01/21\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/03/27\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/03/31\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"combined\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:apple:macos\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"os_fingerprint.nasl\");\n script_require_ports(\"Host/MacOSX/Version\", \"Host/OS\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nos = get_kb_item(\"Host/MacOSX/Version\");\nif (!os)\n{\n os = get_kb_item_or_exit(\"Host/OS\");\n if (\"Mac OS X\" >!< os) audit(AUDIT_OS_NOT, \"macOS / Mac OS X\");\n\n c = get_kb_item(\"Host/OS/Confidence\");\n if (c <= 70) exit(1, \"Can't determine the host's OS with sufficient confidence.\");\n}\nif (!os) audit(AUDIT_OS_NOT, \"macOS / Mac OS X\");\n\nmatches = eregmatch(pattern:\"Mac OS X ([0-9]+(\\.[0-9]+)+)\", string:os);\nif (isnull(matches)) exit(1, \"Failed to parse the macOS / Mac OS X version ('\" + os + \"').\");\n\nversion = matches[1];\nif (version !~ \"^10\\.12($|[^0-9])\") audit(AUDIT_OS_NOT, \"Mac OS 10.12.x\");\n\nfixed_version = \"10.12.4\";\nif (ver_compare(ver:version, fix:fixed_version, strict:FALSE) == -1)\n{\n security_report_v4(\n port:0,\n severity:SECURITY_HOLE,\n xss:TRUE,\n extra:\n '\\n Installed version : ' + version +\n '\\n Fixed version : ' + fixed_version +\n '\\n'\n );\n}\nelse audit(AUDIT_INST_VER_NOT_VULN, \"macOS / Mac OS X\", version);\n", "cvss": {"score": 0.0, "vector": "NONE"}}], "ibm": [{"lastseen": "2023-02-23T21:51:00", "description": "## Summary\n\nIBM Chassis Management Module (CMM) has addressed the following vulnerabilities in tcpdump.\n\n## Vulnerability Details\n\n**Summary**\n\nIBM Chassis Management Module (CMM) has addressed the following vulnerabilities in tcpdump.\n\n**Vulnerability Details**\n\n**CVEID:** [CVE-2016-7922](<https://vulners.com/cve/CVE-2016-7922>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the AH parser in the print-ah.c:ah_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121548> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7923](<https://vulners.com/cve/CVE-2016-7923>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ARP parser in the print-arp.c:arp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121550> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7925](<https://vulners.com/cve/CVE-2016-7925>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the SLIP parser in the print-sl.c:sl_if_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121552> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7926](<https://vulners.com/cve/CVE-2016-7926>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the Ethernet parser in the print-ether.c:ethertype_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121553> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7927](<https://vulners.com/cve/CVE-2016-7927>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IEEE 802.11 parser in the print-802_11.c:ieee802_11_radio_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121554> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7928](<https://vulners.com/cve/CVE-2016-7928>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IPComp parser in the print-ipcomp.c:ipcomp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121555> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7931](<https://vulners.com/cve/CVE-2016-7931>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the MPLS parser in the print-mpls.c:mpls_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121558> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7934](<https://vulners.com/cve/CVE-2016-7934>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the RTCP parser in the print-udp.c:rtcp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121561> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7935](<https://vulners.com/cve/CVE-2016-7935>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the RTP parser in the print-udp.c:rtp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121562> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7936](<https://vulners.com/cve/CVE-2016-7936>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the UDP parser in the print-udp.c:udp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121563> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7937](<https://vulners.com/cve/CVE-2016-7937>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the VAT parser in the print-udp.c:vat_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121564> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7939](<https://vulners.com/cve/CVE-2016-7939>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the GRE parser in the print-gre.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121566> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7940](<https://vulners.com/cve/CVE-2016-7940>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the STP parser in the print-stp.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121567> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7973](<https://vulners.com/cve/CVE-2016-7973>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the AppleTalk parser in the print-atalk.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121568> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7974](<https://vulners.com/cve/CVE-2016-7974>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IP parser in the print-ip.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121569> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7975](<https://vulners.com/cve/CVE-2016-7975>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the TCP parser in the print-tcp.c:tcp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121570> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7983](<https://vulners.com/cve/CVE-2016-7983>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the BOOTP parser in the print-bootp.c:bootp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121571> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7984](<https://vulners.com/cve/CVE-2016-7984>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the TFTP parser in the print-tftp.c:tftp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121572> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7992](<https://vulners.com/cve/CVE-2016-7992>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the Classical IP over ATM parser in the print-cip.c:cip_if_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121575> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7993](<https://vulners.com/cve/CVE-2016-7993>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by multiple parsers in the util-print.c:relts_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121576> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-8574](<https://vulners.com/cve/CVE-2016-8574>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the FRF.15 parser in the print-fr.c:frf15_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121577> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2017-5202](<https://vulners.com/cve/CVE-2017-5202>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ISO CLNS parser in the print-isoclns.c:clnp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121579> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2017-5203](<https://vulners.com/cve/CVE-2017-5203>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the BOOTP parser in the print-bootp.c:bootp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121580> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2017-5204](<https://vulners.com/cve/CVE-2017-5204>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IPv6 parser in the print-ip6.c:ip6_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121581> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2017-5483](<https://vulners.com/cve/CVE-2017-5483>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the SNMP parser in the print-snmp.c:asn1_parse() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121586> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2017-5484](<https://vulners.com/cve/CVE-2017-5484>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ATM parser in the print-atm.c:sig_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121587> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2017-5485](<https://vulners.com/cve/CVE-2017-5485>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ISO CLNS parser in the addrtoname.c:lookup_nsap() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121588> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2017-5486](<https://vulners.com/cve/CVE-2017-5486>)\n\n**Description:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ISO CLNS parser in the print-isoclns.c:clnp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n\nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121589> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**Affected products and versions**\n\nProduct | Affected Version \n---|--- \nIBM Flex System Chassis Management Module (CMM) | 2PET \n \n**Remediation/Fixes**\n\nFirmware fix versions are available on Fix Central: <http://www.ibm.com/support/fixcentral/>\n\nProduct | Fixed Version \n---|--- \nIBM Flex System Chassis Management Module (CMM) \n(ibm_fw_cmm_2pet14i-2.5.9i_anyos_noarch) | 2PET14I \n \n**Workarounds and Mitigations**\n\nNone.\n\n**References**\n\n * [Complete CVSS V3 Guide](<http://www.first.org/cvss/user-guide>)\n * [On-line Calculator V3](<http://www.first.org/cvss/calculator/3.0>)\n\n**Related Information** \n[IBM Secure Engineering Web Portal](<http://www.ibm.com/security/secure-engineering/bulletins.html>) \n[IBM Product Security Incident Response Blog](<https://www.ibm.com/blogs/psirt/>) \n[Lenovo Product Security Advisories](<https://support.lenovo.com/us/en/product_security/home>)\n\n**Acknowledgement**\n\nNone.\n\n**Change History** \n17 May, 2017: Original Version Published\n\n* The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.\n\n**Disclaimer**\n\nAccording to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an \"industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response.\" IBM PROVIDES THE CVSS SCORES \"AS IS\" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.\n\n## ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2019-01-31T02:25:02", "type": "ibm", "title": "Security Bulletin: Vulnerabilities in tcpdump affect IBM Flex System Chassis Management Module (CMM)", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7931", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2019-01-31T02:25:02", "id": "2B3100B92DDE600F37CF5BEF15A7B8234766BD8012D3377359BB45C4DEC0F598", "href": "https://www.ibm.com/support/pages/node/868690", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2023-02-21T21:51:52", "description": "## Summary\n\nPowerKVM is affected by vulnerabilities in tcpdump. IBM has now addressed these vulnerabilities.\n\n## Vulnerability Details\n\n**CVEID:** [_CVE-2016-7986_](<https://vulners.com/cve/CVE-2016-7986>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the GeoNetworking parser in the print-geonet.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121574_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121574>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) \n\n**CVEID:** [_CVE-2016-7985_](<https://vulners.com/cve/CVE-2016-7985>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the CALM FAST parser in the print-calm-fast.c:calm_fast_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121573_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121573>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7984_](<https://vulners.com/cve/CVE-2016-7984>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the TFTP parser in the print-tftp.c:tftp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121572_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121572>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7983_](<https://vulners.com/cve/CVE-2016-7983>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the BOOTP parser in the print-bootp.c:bootp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121571_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121571>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7975_](<https://vulners.com/cve/CVE-2016-7975>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the TCP parser in the print-tcp.c:tcp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121570_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121570>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7974_](<https://vulners.com/cve/CVE-2016-7974>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IP parser in the print-ip.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121569_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121569>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7973_](<https://vulners.com/cve/CVE-2016-7973>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the AppleTalk parser in the print-atalk.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121568_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121568>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7940_](<https://vulners.com/cve/CVE-2016-7940>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the STP parser in the print-stp.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121567_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121567>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7939_](<https://vulners.com/cve/CVE-2016-7939>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the GRE parser in the print-gre.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121566_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121566>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7938_](<https://vulners.com/cve/CVE-2016-7938>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ZeroMQ parser in the print-zeromq.c:zmtp1_print_frame() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121565_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121565>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7937_](<https://vulners.com/cve/CVE-2016-7937>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the VAT parser in the print-udp.c:vat_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121564_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121564>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7936_](<https://vulners.com/cve/CVE-2016-7936>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the UDP parser in the print-udp.c:udp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121563_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121563>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7935_](<https://vulners.com/cve/CVE-2016-7935>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the RTP parser in the print-udp.c:rtp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121562_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121562>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7934_](<https://vulners.com/cve/CVE-2016-7934>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the RTCP parser in the print-udp.c:rtcp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121561_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121561>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7933_](<https://vulners.com/cve/CVE-2016-7933>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the PPP parser in the print-ppp.c:ppp_hdlc_if_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121560_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121560>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7932_](<https://vulners.com/cve/CVE-2016-7932>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the PIM parser in the print-pim.c:pimv2_check_checksum() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121559_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121559>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7931_](<https://vulners.com/cve/CVE-2016-7931>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the MPLS parser in the print-mpls.c:mpls_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121558_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121558>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7930_](<https://vulners.com/cve/CVE-2016-7930>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the LLC/SNAP parser in the print-llc.c:llc_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121557_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121557>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7929_](<https://vulners.com/cve/CVE-2016-7929>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the Juniper PPPoE ATM parser in the print-juniper.c:juniper_parse_header() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121556_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121556>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7928_](<https://vulners.com/cve/CVE-2016-7928>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IPComp parser in the print-ipcomp.c:ipcomp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121555_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121555>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7927_](<https://vulners.com/cve/CVE-2016-7927>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IEEE 802.11 parser in the print-802_11.c:ieee802_11_radio_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121554_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121554>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7926_](<https://vulners.com/cve/CVE-2016-7926>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the Ethernet parser in the print-ether.c:ethertype_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121553_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121553>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7925_](<https://vulners.com/cve/CVE-2016-7925>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the SLIP parser in the print-sl.c:sl_if_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121552_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121552>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7924_](<https://vulners.com/cve/CVE-2016-7924>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ATM parser in the print-atm.c:oam_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121551_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121551>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7923_](<https://vulners.com/cve/CVE-2016-7923>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ARP parser in the print-arp.c:arp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121550_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121550>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2016-7922_](<https://vulners.com/cve/CVE-2016-7922>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the AH parser in the print-ah.c:ah_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121548_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121548>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [_CVE-2015-2155_](<https://vulners.com/cve/CVE-2015-2155>)** \nDESCRIPTION:** Tcpdump could allow a remote attacker to execute arbitrary code on the system, caused by an error in the Force printer. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. \nCVSS Base Score: 7.5 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/101831_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/101831>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)\n\n**CVEID:** [_CVE-2015-2154_](<https://vulners.com/cve/CVE-2015-2154>)** \nDESCRIPTION:** Tcpdump could allow a remote attacker to execute arbitrary code on the system, caused by an error in the Ethernet printer module. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. \nCVSS Base Score: 7.5 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/101830_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/101830>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)\n\n**CVEID:** [_CVE-2015-2153_](<https://vulners.com/cve/CVE-2015-2153>)** \nDESCRIPTION:** Tcpdump could allow a remote attacker to execute arbitrary code on the system, caused by an error in the TCP printer module. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. \nCVSS Base Score: 7.5 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/101829_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/101829>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)\n\n**CVEID:** [_CVE-2015-0261_](<https://vulners.com/cve/CVE-2015-0261>)** \nDESCRIPTION:** Tcpdump could allow a remote attacker to execute arbitrary code on the system, caused by an error in the IPv6 mobility printer module. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. \nCVSS Base Score: 7.5 \nCVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/101828_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/101828>) for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)\n\n## Affected Products and Versions\n\nPowerKVM 2.1 and 3.1\n\n## Remediation/Fixes\n\nCustomers can update PowerKVM systems by using \"yum update\". \n\nFix images are made available via Fix Central. For version 3.1, see [_https://ibm.biz/BdHggw_](<https://ibm.biz/BdHggw>). This issue is addressed starting with v3.1.0.2 update 10.\n\n \n \nFor version 2.1, see [_https://ibm.biz/BdEnT8_](<https://ibm.biz/BdEnT8>). This issue is addressed starting with PowerKVM 2.1.1.3-65 update 19. Customers running v2.1 are, in any case, encouraged to upgrade to v3.1. \n \nFor v2.1 systems currently running fix levels of PowerKVM prior to 2.1.1, please see <http://download4.boulder.ibm.com/sar/CMA/OSA/05e4c/0/README> for prerequisite fixes and instructions. \n\n## Workarounds and Mitigations\n\nnone\n\n## ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2018-06-18T01:38:06", "type": "ibm", "title": "Security Bulletin: Vulnerabilities in tcpdump affect PowerKVM", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986"], "modified": "2018-06-18T01:38:06", "id": "19B3C0317C25A65FE6EF48EE766279403899845ACBF9FD03763C49F976F3DEE4", "href": "https://www.ibm.com/support/pages/node/632051", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2023-02-21T01:49:49", "description": "## Summary\n\nIBM QRadar Network Security has addressed vulnerabilities in tcpdump.\n\n## Vulnerability Details\n\n**CVEID:** [CVE-2016-7986](<https://vulners.com/cve/CVE-2016-7986>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the GeoNetworking parser in the print-geonet.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121574> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) \n\n**CVEID:** [CVE-2016-7985](<https://vulners.com/cve/CVE-2016-7985>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the CALM FAST parser in the print-calm-fast.c:calm_fast_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121573> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7984](<https://vulners.com/cve/CVE-2016-7984>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the TFTP parser in the print-tftp.c:tftp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121572> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7983](<https://vulners.com/cve/CVE-2016-7983>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the BOOTP parser in the print-bootp.c:bootp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121571> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7975](<https://vulners.com/cve/CVE-2016-7975>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the TCP parser in the print-tcp.c:tcp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121570> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7974](<https://vulners.com/cve/CVE-2016-7974>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IP parser in the print-ip.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121569> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7973](<https://vulners.com/cve/CVE-2016-7973>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the AppleTalk parser in the print-atalk.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121568> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7940](<https://vulners.com/cve/CVE-2016-7940>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the STP parser in the print-stp.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121567> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7939](<https://vulners.com/cve/CVE-2016-7939>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the GRE parser in the print-gre.c and other functions. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121566> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7938](<https://vulners.com/cve/CVE-2016-7938>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ZeroMQ parser in the print-zeromq.c:zmtp1_print_frame() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121565> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7937](<https://vulners.com/cve/CVE-2016-7937>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the VAT parser in the print-udp.c:vat_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121564> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7936](<https://vulners.com/cve/CVE-2016-7936>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the UDP parser in the print-udp.c:udp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121563> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7935](<https://vulners.com/cve/CVE-2016-7935>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the RTP parser in the print-udp.c:rtp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121562> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7934](<https://vulners.com/cve/CVE-2016-7934>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the RTCP parser in the print-udp.c:rtcp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121561> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7933](<https://vulners.com/cve/CVE-2016-7933>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the PPP parser in the print-ppp.c:ppp_hdlc_if_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121560> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7932](<https://vulners.com/cve/CVE-2016-7932>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the PIM parser in the print-pim.c:pimv2_check_checksum() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121559> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7931](<https://vulners.com/cve/CVE-2016-7931>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the MPLS parser in the print-mpls.c:mpls_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121558> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:**[CVE-2016-7930](<https://vulners.com/cve/CVE-2016-7930>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the LLC/SNAP parser in the print-llc.c:llc_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121557> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7929](<https://vulners.com/cve/CVE-2016-7929>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the Juniper PPPoE ATM parser in the print-juniper.c:juniper_parse_header() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121556> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7928](<https://vulners.com/cve/CVE-2016-7928>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IPComp parser in the print-ipcomp.c:ipcomp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121555> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7927](<https://vulners.com/cve/CVE-2016-7927>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the IEEE 802.11 parser in the print-802_11.c:ieee802_11_radio_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121554> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7926](<https://vulners.com/cve/CVE-2016-7926>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the Ethernet parser in the print-ether.c:ethertype_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121553> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7925](<https://vulners.com/cve/CVE-2016-7925>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the SLIP parser in the print-sl.c:sl_if_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121552> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7924](<https://vulners.com/cve/CVE-2016-7924>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ATM parser in the print-atm.c:oam_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121551> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7923](<https://vulners.com/cve/CVE-2016-7923>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the ARP parser in the print-arp.c:arp_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121550> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2016-7922](<https://vulners.com/cve/CVE-2016-7922>)** \nDESCRIPTION:** tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the AH parser in the print-ah.c:ah_print() function. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. \nCVSS Base Score: 7.3 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/121548> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n**CVEID:** [CVE-2015-2155](<https://vulners.com/cve/CVE-2015-2155>)** \nDESCRIPTION:** Tcpdump could allow a remote attacker to execute arbitrary code on the system, caused by an error in the Force printer. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. \nCVSS Base Score: 7.5 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/101831> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS: 2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P)\n\n**CVEID:** [CVE-2015-2154](<https://vulners.com/cve/CVE-2015-2154>)** \nDESCRIPTION:** Tcpdump could allow a remote attacker to execute arbitrary code on the system, caused by an error in the Ethernet printer module. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. \nCVSS Base Score: 7.5 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/101830> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS: 2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P)\n\n**CVEID:** [CVE-2015-2153](<https://vulners.com/cve/CVE-2015-2153>)** \nDESCRIPTION:** Tcpdump could allow a remote attacker to execute arbitrary code on the system, caused by an error in the TCP printer module. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. \nCVSS Base Score: 7.5 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/101829> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS: 2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P)\n\n**CVEID:** [CVE-2015-0261](<https://vulners.com/cve/CVE-2015-0261>)** \nDESCRIPTION:** Tcpdump could allow a remote attacker to execute arbitrary code on the system, caused by an error in the IPv6 mobility printer module. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. \nCVSS Base Score: 7.5 \nCVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/101828> for the current score \nCVSS Environmental Score*: Undefined \nCVSS Vector: (CVSS: 2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P)\n\n## Affected Products and Versions\n\nIBM QRadar Network Security 5.4\n\n## Remediation/Fixes\n\n_Product_\n\n| _VRMF_| _Remediation/First Fix_ \n---|---|--- \nIBM QRadar Network Security| Firmware version 5.4| Install Firmware 5.4.0.3 from the Available Updates page of the Local Management Interface, or by performing a One Time Scheduled Installation from SiteProtector. \nOr \nDownload Firmware 5.4.0.3 from [IBM Security License Key and Download Center](<https://ibmss.flexnetoperations.com/control/isdl/home>) and upload and install via the Available Updates page of the Local Management Interface. \n \n## Workarounds and Mitigations\n\nNone\n\n## ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2018-06-16T22:02:20", "type": "ibm", "title": "Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in tcpdump", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986"], "modified": "2018-06-16T22:02:20", "id": "964433E830DE30CA16069ED3DF051FF5A2E8B92ADAC0FAD8C0338D247D70BC56", "href": "https://www.ibm.com/support/pages/node/296321", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "aix": [{"lastseen": "2023-12-03T22:23:47", "description": "IBM SECURITY ADVISORY\n\nFirst Issued: Thu May 25 11:23:13 CDT 2017\n|Updated: Thu Jul 27 11:57:05 CDT 2017 \n|Update 1: Corrected the checksum value for iFix IV94729s9b.170425.epkg.Z\n\nThe most recent version of this document is available here:\n\nhttp://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc\nhttps://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc\nftp://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc\n\nSecurity Bulletin: Vulnerabilities in tcpdump affect AIX\n CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925\n CVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7930\n CVE-2016-7931 CVE-2016-7932 CVE-2016-7933 CVE-2016-7934 \n CVE-2016-7935 CVE-2016-7936 CVE-2016-7937 CVE-2016-7939 \n CVE-2016-7940 CVE-2016-7973 CVE-2016-7974 CVE-2016-7975 \n CVE-2016-7983 CVE-2016-7984 CVE-2016-7992 CVE-2016-7993 \n CVE-2016-8574 CVE-2016-8575 CVE-2017-5202 CVE-2017-5203 \n CVE-2017-5204 CVE-2017-5482 CVE-2017-5483 CVE-2017-5484 \n CVE-2017-5485 CVE-2017-5486 \n\nNote: See section IV for full CVE details.\n===============================================================================\n\nSUMMARY:\n\n There are multiple vulnerabilities in tcpdump that impact AIX. \n\n\n===============================================================================\n \nI. AFFECTED PRODUCTS AND VERSIONS:\n \n \n AIX 5.3, 6.1, 7.1, 7.2\n \n The following fileset levels are vulnerable:\n \n key_fileset = aix\n \n Fileset Lower Level Upper Level KEY\n -----------------------------------------------------\n bos.net.tcp.server 5.3.12.0 5.3.12.6 key_w_fs\n bos.net.tcp.server 6.1.9.0 6.1.9.201 key_w_fs\n bos.net.tcp.server 7.1.3.0 7.1.3.49 key_w_fs\n bos.net.tcp.server 7.1.4.0 7.1.4.31 key_w_fs\n bos.net.tcp.tcpdump 7.2.0.0 7.2.0.2 key_w_fs\n bos.net.tcp.tcpdump 7.2.1.0 7.2.1.0 key_w_fs\n \n \n Note: To find out whether the affected filesets are installed \n on your systems, refer to the lslpp command found in AIX user's\n guide.\n\n Example: lslpp -L | grep -i bos.net.tcp.server \n\nII. REMEDIATION:\n\n A. FIXES\n\n Fixes are available.\n\n The fixes can be downloaded via ftp or http from:\n\n ftp://aix.software.ibm.com/aix/efixes/security/tcpdump_fix2.tar\n http://aix.software.ibm.com/aix/efixes/security/tcpdump_fix2.tar\n https://aix.software.ibm.com/aix/efixes/security/tcpdump_fix2.tar \n\n The links above are to a tar file containing this signed\n advisory, interim fixes, and OpenSSL signatures for each interim fix.\n The fixes below include prerequisite checking. This will\n enforce the correct mapping between the fixes and AIX\n Technology Levels.\n\n\n AIX Level Interim Fix (*.Z) KEY\n ----------------------------------------------\n 5.3.12.9 IV94729s9b.170425.epkg.Z key_w_fix\n 6.1.9.7 IV94728s9c.170420.epkg.Z key_w_fix\n 6.1.9.8 IV94728s9c.170420.epkg.Z key_w_fix\n 6.1.9.9 IV94728s9c.170420.epkg.Z key_w_fix\n 7.1.3.7 IV94727s9b.170417.epkg.Z key_w_fix\n 7.1.3.8 IV94727s9b.170417.epkg.Z key_w_fix\n 7.1.3.9 IV94727s9b.170417.epkg.Z key_w_fix\n 7.1.4.2 IV94726s4c.170417.epkg.Z key_w_fix\n 7.1.4.3 IV94726s4c.170417.epkg.Z key_w_fix\n 7.1.4.4 IV94726s4c.170417.epkg.Z key_w_fix\n 7.2.0.1 IV94724s4b.170417.epkg.Z key_w_fix\n 7.2.0.2 IV94724s4b.170417.epkg.Z key_w_fix\n 7.2.0.3 IV94724s4b.170417.epkg.Z key_w_fix\n 7.2.1.1 IV94723s2a.170414.epkg.Z key_w_fix\n 7.2.1.2 IV94723s2a.170414.epkg.Z key_w_fix\n 7.2.1.3 IV94723s2a.170414.epkg.Z key_w_fix\n \n To extract the fixes from the tar file:\n\n tar xvf tcpdump_fix2.tar\n cd tcpdump_fix2\n\n Verify you have retrieved the fixes intact:\n\n The checksums below were generated using the\n \"openssl dgst -sha256 <filename>\" command as the following:\n\n openssl dgst -sha256 filename KEY\n -----------------------------------------------------------------------------------------------------\n| 346f594ec89137c8bfd4d27998cb15abfd1993ff42d6e5d021ec215ca55d7131 IV94729s9b.170425.epkg.Z key_w_csum\n a2fc19f00b4ff99019916c379d314642483d323b7b9787abc32ecc0a05dd5241 IV94728s9c.170420.epkg.Z key_w_csum\n e2931d9ba01be3eb4d31a35153cbd79392ef7cf5b5fa09849c5b0613f6b05b0b IV94727s9b.170417.epkg.Z key_w_csum\n 6d39bdee9318b820748385f382ba6f365b121a53ee2818c546e0f65e0d312dbd IV94726s4c.170417.epkg.Z key_w_csum\n a4d1c36dec0f853dba468e105b57137695821818b4dbf51f4d991979fc010672 IV94724s4b.170417.epkg.Z key_w_csum\n e6619c4b98a45048e453b7fc2a3a27e3a34fb80d36d61a73145fa82e14a4dcd4 IV94723s2a.170414.epkg.Z key_w_csum\n \n These sums should match exactly. The OpenSSL signatures in the tar\n file and on this advisory can also be used to verify the\n integrity of the fixes. If the sums or signatures cannot be\n confirmed, contact IBM AIX Support at https://ibm.com/support/\n and describe the discrepancy.\n \n openssl dgst -sha1 -verify <pubkey_file> -signature <advisory_file>.sig <advisory_file>\n\n openssl dgst -sha1 -verify <pubkey_file> -signature <ifix_file>.sig <ifix_file>\n\n Published advisory OpenSSL signature file location:\n\n http://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc.sig\n https://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc.sig\n ftp://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc.sig \n\n B. INTERIM FIX INSTALLATION\n\n IMPORTANT: If possible, it is recommended that a mksysb backup\n of the system be created. Verify it is both bootable and\n readable before proceeding.\n\n To preview a fix installation:\n\n installp -a -d fix_name -p all # where fix_name is the name of the\n # fix package being previewed.\n To install a fix package:\n\n installp -a -d fix_name -X all # where fix_name is the name of the\n # fix package being installed.\n\n Interim fixes have had limited functional and regression\n testing but not the full regression testing that takes place\n for Service Packs; however, IBM does fully support them.\n\n Interim fix management documentation can be found at:\n http://www14.software.ibm.com/webapp/set2/sas/f/aix.efixmgmt/home.html\n\n To preview an interim fix installation:\n\n emgr -e ipkg_name -p # where ipkg_name is the name of the\n # interim fix package being previewed.\n\n To install an interim fix package:\n \n emgr -e ipkg_name -X # where ipkg_name is the name of the\n # interim fix package being installed.\n\n C. APARS\n \n IBM has assigned the following APARs to this problem:\n\n AIX Level APAR Availability SP KEY\n ------------------------------------------------\n 5.3.12 IV94729 ** N/A key_w_apar\n 6.1.9 IV94728 ** SP10 key_w_apar\n 7.1.3 IV94727 ** N/A key_w_apar\n 7.1.4 IV94726 ** SP5 key_w_apar\n 7.2.0 IV94724 ** SP5 key_w_apar\n 7.2.1 IV94723 ** SP3 key_w_apar\n\n ** Please refer to AIX support lifecycle information page for availability\n of Service Packs:\n http://www-01.ibm.com/support/docview.wss?uid=isg3T1012517\n\n Subscribe to the APARs here:\n\n https://www.ibm.com/support/docview.wss?uid=isg1IV94729\n https://www.ibm.com/support/docview.wss?uid=isg1IV94728\n https://www.ibm.com/support/docview.wss?uid=isg1IV94727\n https://www.ibm.com/support/docview.wss?uid=isg1IV94726\n https://www.ibm.com/support/docview.wss?uid=isg1IV94723\n https://www.ibm.com/support/docview.wss?uid=isg1IV94724\n \n By subscribing, you will receive periodic email alerting you\n to the status of the APAR, and a link to download the fix once\n it becomes available.\n\n\nIII. WORKAROUNDS AND MITIGATIONS:\n\n None.\n\nIV.VULNERABILITY DETAILS:\n\nVulnerabilities in tcpdump affect AIX:\n\nCVEID: CVE-2016-7922\nhttps://vulners.com/cve/CVE-2016-7922\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds\nchecking by the AH parser in the print-ah.c:ah_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/12158 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7923\nhttps://vulners.com/cve/CVE-2016-7923\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the ARP parser in the print-arp.c:arp_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute arbitrary \ncode on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121550 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7924\nhttps://vulners.com/cve/CVE-2016-7924\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the ATM parser in the print-atm.c:oam_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute arbitrary \ncode on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121551 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7925\nhttps://vulners.com/cve/CVE-2016-7925\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the SLIP parser in the print-sl.c:sl_if_print() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121552 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7926\nhttps://vulners.com/cve/CVE-2016-79267926\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the Ethernet parser in the print-ether.c:ethertype_print() function. \nBy sending an overly long argument, a remote attacker could overflow a buffer and \nexecute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121553 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7927\nhttps://vulners.com/cve/CVE-2016-7927\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the IEEE 802.11 parser in the print-802_11.c:ieee802_11_radio_print() \nfunction. By sending an overly long argument, a remote attacker could overflow a\nbuffer and execute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121554 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7928\nhttps://vulners.com/cve/CVE-2016-7928\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the IPComp parser in the print-ipcomp.c:ipcomp_print() function. By \nsending an overly long argument, a remote attacker could overflow a buffer and \nexecute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121555 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7930\nhttps://vulners.com/cve/CVE-2016-7930\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the LLC/SNAP parser in the print-llc.c:llc_print() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121557 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7931\nhttps://vulners.com/cve/CVE-2016-7931\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the MPLS parser in the print-mpls.c:mpls_print() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121558 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7932\nhttps://vulners.com/cve/CVE-2016-7932\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the PIM parser in the print-pim.c:pimv2_check_checksum() function. By \nsending an overly long argument, a remote attacker could overflow a buffer and \nexecute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121559 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7933\nhttps://vulners.com/cve/CVE-2016-7933\ufffd\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the PPP parser in the print-ppp.c:ppp_hdlc_if_print() function. By \nsending an overly long argument, a remote attacker could overflow a buffer and \nexecute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121560 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7934\nhttps://vulners.com/cve/CVE-2016-7934\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the RTCP parser in the print-udp.c:rtcp_print() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121561 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7935\nhttps://vulners.com/cve/CVE-2016-7935\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the RTP parser in the print-udp.c:rtp_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121562 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7936\nhttps://vulners.com/cve/CVE-2016-7936\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the UDP parser in the print-udp.c:udp_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121563 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7937\nhttps://vulners.com/cve/CVE-2016-7937\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the VAT parser in the print-udp.c:vat_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121564 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7939\nhttps://vulners.com/cve/CVE-2016-7939\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the GRE parser in the print-gre.c and other functions. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121566 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7940\nhttps://vulners.com/cve/CVE-2016-7940\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the STP parser in the print-stp.c and other functions. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121567 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7973\nhttps://vulners.com/cve/CVE-2016-7973\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the AppleTalk parser in the print-atalk.c and other functions. By \nsending an overly long argument, a remote attacker could overflow a buffer and \nexecute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121568 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7974\nhttps://vulners.com/cve/CVE-2016-7974\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the IP parser in the print-ip.c and other functions. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121569 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7975\nhttps://vulners.com/cve/CVE-2016-7975\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the TCP parser in the print-tcp.c:tcp_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121570 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7983\nhttps://vulners.com/cve/CVE-2016-7983\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the BOOTP parser in the print-bootp.c:bootp_print() function. By \nsending an overly long argument, a remote attacker could overflow a buffer and \nexecute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121571 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7984\nhttps://vulners.com/cve/CVE-2016-7984\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the TFTP parser in the print-tftp.c:tftp_print() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121572 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7992\nhttps://vulners.com/cve/CVE-2016-7992\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the Classical IP over ATM parser in the print-cip.c:cip_if_print() \nfunction. By sending an overly long argument, a remote attacker could overflow a \nbuffer and execute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121575 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-7993\nhttps://vulners.com/cve/CVE-2016-7993\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by multiple parsers in the util-print.c:relts_print() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121576 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-8574\nhttps://vulners.com/cve/CVE-2016-8574\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the FRF.15 parser in the print-fr.c:frf15_print() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121577 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2016-8575\nhttps://vulners.com/cve/CVE-2016-8575\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the Q.933 parser in the print-fr.c:q933_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute arbitrary \ncode on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121578 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2017-5202\nhttps://vulners.com/cve/CVE-2017-5202\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the ISO CLNS parser in the print-isoclns.c:clnp_print() function. By \nsending an overly long argument, a remote attacker could overflow a buffer and \nexecute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121579 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2017-5203\nhttps://vulners.com/cve/CVE-2017-5203\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the BOOTP parser in the print-bootp.c:bootp_print() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121580 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2017-5204\nhttps://vulners.com/cve/CVE-2017-5204\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the IPv6 parser in the print-ip6.c:ip6_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute arbitrary \ncode on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121581 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2017-5482\nhttps://vulners.com/cve/CVE-2017-5482\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the Q.933 parser in the print-fr.c:q933_print() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121585 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2017-5483\nhttps://vulners.com/cve/CVE-2017-5483\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the SNMP parser in the print-snmp.c:asn1_parse() function. By sending \nan overly long argument, a remote attacker could overflow a buffer and execute \narbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121586 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2017-5484\nhttps://vulners.com/cve/CVE-2017-5484\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the ATM parser in the print-atm.c:sig_print() function. By sending an \noverly long argument, a remote attacker could overflow a buffer and execute arbitrary \ncode on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121587 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2017-5485\nhttps://vulners.com/cve/CVE-2017-5485\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the ISO CLNS parser in the addrtoname.c:lookup_nsap() function. By \nsending an overly long argument, a remote attacker could overflow a buffer and \nexecute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121588 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\nCVEID: CVE-2017-5486\nhttps://vulners.com/cve/CVE-2017-5486\nDESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds \nchecking by the ISO CLNS parser in the print-isoclns.c:clnp_print() function. By \nsending an overly long argument, a remote attacker could overflow a buffer and \nexecute arbitrary code on the system or cause the application to crash.\nCVSS Base Score: 7.3\nCVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121589 \nfor the current score\nCVSS Environmental Score*: Undefined\nCVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\n\n===============================================================================\n\nCONTACT US:\n\n Note: Keywords labeled as KEY in this document are used for parsing\n purposes.\n\n If you would like to receive AIX Security Advisories via email,\n please visit \"My Notifications\":\n\n http://www.ibm.com/support/mynotifications\n https://www.ibm.com/support/mynotifications\n\n To view previously issued advisories, please visit:\n\n http://www14.software.ibm.com/webapp/set2/subscriptions/onvdq\n https://www14.software.ibm.com/webapp/set2/subscriptions/onvdq\n \n To obtain the OpenSSL public key that can be used to verify the\n signed advisories and ifixes:\n\n Download the key from our web page:\n\n http://www.ibm.com/systems/resources/systems_p_os_aix_security_pubkey.txt\n https://www.ibm.com/systems/resources/systems_p_os_aix_security_pubkey.txt\n\n Please contact your local IBM AIX support center for any\n assistance.\n\nREFERENCES:\n \n Complete CVSS v3 Guide: http://www.first.org/cvss/user-guide\n https://www.first.org/cvss/user-guide\n On-line Calculator v3:\n http://www.first.org/cvss/calculator/3.0\n https://www.first.org/cvss/calculator/3.0\n\nACKNOWLEDGEMENTS:\n\n None \n\nCHANGE HISTORY:\n\n First Issued: Thu May 25 11:23:13 CDT 2017\n| Updated: Thu Jul 27 11:57:05 CDT 2017 \n| Update 1: Corrected the checksum value for iFix IV94729s9b.170425.epkg.Z\n\n===============================================================================\n\n*The CVSS Environment Score is customer environment specific and will \nultimately impact the Overall CVSS Score. Customers can evaluate the impact \nof this vulnerability in their environments by accessing the links in the \nReference section of this Security Bulletin. \n\nDisclaimer\nAccording to the Forum of Incident Response and Security Teams (FIRST), the \nCommon Vulnerability Scoring System (CVSS) is an \"industry open standard \ndesigned to convey vulnerability severity and help to determine urgency and \npriority of response.\" IBM PROVIDES THE CVSS SCORES \"AS IS\" WITHOUT WARRANTY \nOF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS \nFOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT \nOF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.\n \n\n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-05-25T11:23:13", "type": "aix", "title": "There are multiple vulnerabilities in tcpdump that impact AIX.", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-79267926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-05-25T11:23:13", "id": "TCPDUMP_ADVISORY2.ASC", "href": "https://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "gentoo": [{"lastseen": "2023-12-03T21:03:45", "description": "### Background\n\ntcpdump is a tool for network monitoring and data acquisition.\n\n### Description\n\nMultiple vulnerabilities have been discovered in tcpdump. Please review the CVE identifiers referenced below for details. \n\n### Impact\n\nA remote attacker, by sending a specially crafted network package, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll tcpdump users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=net-analyzer/tcpdump-4.9.0\"", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-02-21T00:00:00", "type": "gentoo", "title": "tcpdump: Multiple vulnerabilities", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-02-21T00:00:00", "id": "GLSA-201702-30", "href": "https://security.gentoo.org/glsa/201702-30", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "osv": [{"lastseen": "2022-08-05T05:20:23", "description": "\nMultiple vulnerabilities have been discovered in tcpdump, a command-line\nnetwork traffic analyzer. These vulnerabilities might result in denial of\nservice or the execution of arbitrary code.\n\n\n* [CVE-2016-7922](https://security-tracker.debian.org/tracker/CVE-2016-7922)\nBuffer overflow in parser.\n* [CVE-2016-7923](https://security-tracker.debian.org/tracker/CVE-2016-7923)\nBuffer overflow in parser.\n* [CVE-2016-7924](https://security-tracker.debian.org/tracker/CVE-2016-7924)\nBuffer overflow in parser.\n* [CVE-2016-7925](https://security-tracker.debian.org/tracker/CVE-2016-7925)\nBuffer overflow in parser.\n* [CVE-2016-7926](https://security-tracker.debian.org/tracker/CVE-2016-7926)\nBuffer overflow in parser.\n* [CVE-2016-7927](https://security-tracker.debian.org/tracker/CVE-2016-7927)\nBuffer overflow in parser.\n* [CVE-2016-7928](https://security-tracker.debian.org/tracker/CVE-2016-7928)\nBuffer overflow in parser.\n* [CVE-2016-7929](https://security-tracker.debian.org/tracker/CVE-2016-7929)\nBuffer overflow in parser.\n* [CVE-2016-7930](https://security-tracker.debian.org/tracker/CVE-2016-7930)\nBuffer overflow in parser.\n* [CVE-2016-7931](https://security-tracker.debian.org/tracker/CVE-2016-7931)\nBuffer overflow in parser.\n* [CVE-2016-7932](https://security-tracker.debian.org/tracker/CVE-2016-7932)\nBuffer overflow in parser.\n* [CVE-2016-7933](https://security-tracker.debian.org/tracker/CVE-2016-7933)\nBuffer overflow in parser.\n* [CVE-2016-7934](https://security-tracker.debian.org/tracker/CVE-2016-7934)\nBuffer overflow in parser.\n* [CVE-2016-7935](https://security-tracker.debian.org/tracker/CVE-2016-7935)\nBuffer overflow in parser.\n* [CVE-2016-7936](https://security-tracker.debian.org/tracker/CVE-2016-7936)\nBuffer overflow in parser.\n* [CVE-2016-7937](https://security-tracker.debian.org/tracker/CVE-2016-7937)\nBuffer overflow in parser.\n* [CVE-2016-7938](https://security-tracker.debian.org/tracker/CVE-2016-7938)\nBuffer overflow in parser.\n* [CVE-2016-7939](https://security-tracker.debian.org/tracker/CVE-2016-7939)\nBuffer overflow in parser.\n* [CVE-2016-7940](https://security-tracker.debian.org/tracker/CVE-2016-7940)\nBuffer overflow in parser.\n* [CVE-2016-7973](https://security-tracker.debian.org/tracker/CVE-2016-7973)\nBuffer overflow in parser.\n* [CVE-2016-7974](https://security-tracker.debian.org/tracker/CVE-2016-7974)\nBuffer overflow in parser.\n* [CVE-2016-7975](https://security-tracker.debian.org/tracker/CVE-2016-7975)\nBuffer overflow in parser.\n* [CVE-2016-7983](https://security-tracker.debian.org/tracker/CVE-2016-7983)\nBuffer overflow in parser.\n* [CVE-2016-7984](https://security-tracker.debian.org/tracker/CVE-2016-7984)\nBuffer overflow in parser.\n* [CVE-2016-7985](https://security-tracker.debian.org/tracker/CVE-2016-7985)\nBuffer overflow in parser.\n* [CVE-2016-7986](https://security-tracker.debian.org/tracker/CVE-2016-7986)\nBuffer overflow in parser.\n* [CVE-2016-7992](https://security-tracker.debian.org/tracker/CVE-2016-7992)\nBuffer overflow in parser.\n* [CVE-2016-7993](https://security-tracker.debian.org/tracker/CVE-2016-7993)\nBuffer overflow in parser.\n* [CVE-2016-8574](https://security-tracker.debian.org/tracker/CVE-2016-8574)\nBuffer overflow in parser.\n* [CVE-2016-8575](https://security-tracker.debian.org/tracker/CVE-2016-8575)\nBuffer overflow in parser.\n* [CVE-2017-5202](https://security-tracker.debian.org/tracker/CVE-2017-5202)\nBuffer overflow in parser.\n* [CVE-2017-5203](https://security-tracker.debian.org/tracker/CVE-2017-5203)\nBuffer overflow in parser.\n* [CVE-2017-5204](https://security-tracker.debian.org/tracker/CVE-2017-5204)\nBuffer overflow in parser.\n* [CVE-2017-5205](https://security-tracker.debian.org/tracker/CVE-2017-5205)\nBuffer overflow in parser.\n* [CVE-2017-5341](https://security-tracker.debian.org/tracker/CVE-2017-5341)\nBuffer overflow in parser.\n* [CVE-2017-5342](https://security-tracker.debian.org/tracker/CVE-2017-5342)\nBuffer overflow in parser.\n* [CVE-2017-5482](https://security-tracker.debian.org/tracker/CVE-2017-5482)\nBuffer overflow in parser.\n* [CVE-2017-5483](https://security-tracker.debian.org/tracker/CVE-2017-5483)\nBuffer overflow in parser.\n* [CVE-2017-5484](https://security-tracker.debian.org/tracker/CVE-2017-5484)\nBuffer overflow in parser.\n* [CVE-2017-5485](https://security-tracker.debian.org/tracker/CVE-2017-5485)\nBuffer overflow in parser.\n* [CVE-2017-5486](https://security-tracker.debian.org/tracker/CVE-2017-5486)\nBuffer overflow in parser.\n\n\nFor Debian 7 Wheezy, these problems have been fixed in version\n4.9.0-1~deb7u1.\n\n\nWe recommend that you upgrade your tcpdump packages.\n\n\nFurther information about Debian LTS security advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: <https://wiki.debian.org/LTS>\n\n\n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-01-30T00:00:00", "type": "osv", "title": "tcpdump - security update", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7936", "CVE-2016-7983", "CVE-2016-7930", "CVE-2017-5341", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-7922", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-7928", "CVE-2017-5342", "CVE-2016-7993", "CVE-2016-7986", "CVE-2016-7935", "CVE-2017-5205", "CVE-2016-7934", "CVE-2017-5486", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-8574", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2016-7974", "CVE-2016-7992", "CVE-2016-7932", "CVE-2017-5202", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-5483", "CVE-2016-7973", "CVE-2017-5482", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7927", "CVE-2017-5485", "CVE-2016-7933"], "modified": "2022-08-05T05:20:03", "id": "OSV:DLA-809-1", "href": "https://osv.dev/vulnerability/DLA-809-1", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "openvas": [{"lastseen": "2019-05-29T18:34:12", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2017-02-22T00:00:00", "type": "openvas", "title": "Ubuntu Update for tcpdump USN-3205-1", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7936", "CVE-2016-7983", "CVE-2016-7930", "CVE-2017-5341", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-7922", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-7928", "CVE-2017-5342", "CVE-2016-7993", "CVE-2016-7986", "CVE-2016-7935", "CVE-2017-5205", "CVE-2016-7934", "CVE-2017-5486", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-8574", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2016-7974", "CVE-2016-7992", "CVE-2016-7932", "CVE-2017-5202", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-5483", "CVE-2016-7973", "CVE-2017-5482", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7927", "CVE-2017-5485", "CVE-2016-7933"], "modified": "2019-03-13T00:00:00", "id": "OPENVAS:1361412562310843059", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843059", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Ubuntu Update for tcpdump USN-3205-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843059\");\n script_version(\"$Revision: 14140 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2017-02-22 05:51:05 +0100 (Wed, 22 Feb 2017)\");\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\",\n \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\",\n \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\",\n \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\",\n \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\",\n \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\",\n \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\",\n \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\",\n \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\",\n \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\",\n \"CVE-2017-5486\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for tcpdump USN-3205-1\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'tcpdump'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"It was discovered that tcpdump incorrectly handled certain packets. A\nremote attacker could use this issue to cause tcpdump to crash, resulting\nin a denial of service, or possibly execute arbitrary code.\n\nIn the default installation, attackers would be isolated by the tcpdump\nAppArmor profile.\");\n script_tag(name:\"affected\", value:\"tcpdump on Ubuntu 16.10,\n Ubuntu 16.04 LTS,\n Ubuntu 14.04 LTS,\n Ubuntu 12.04 LTS\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"USN\", value:\"3205-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3205-1/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU(14\\.04 LTS|16\\.10|12\\.04 LTS|16\\.04 LTS)\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU14.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"tcpdump\", ver:\"4.9.0-1ubuntu1~ubuntu14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU16.10\")\n{\n\n if ((res = isdpkgvuln(pkg:\"tcpdump\", ver:\"4.9.0-1ubuntu1~ubuntu16.10.1\", rls:\"UBUNTU16.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU12.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"tcpdump\", ver:\"4.9.0-1ubuntu1~ubuntu12.04.1\", rls:\"UBUNTU12.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU16.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"tcpdump\", ver:\"4.9.0-1ubuntu1~ubuntu16.04.1\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2017-07-24T12:57:27", "description": "Multiple vulnerabilities have been\ndiscovered in tcpdump, a command-line network traffic analyzer. These\nvulnerabilities might result in denial of service or the execution of arbitrary\ncode.", "cvss3": {}, "published": "2017-01-29T00:00:00", "type": "openvas", "title": "Debian Security Advisory DSA 3775-1 (tcpdump - security update)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7936", "CVE-2016-7983", "CVE-2016-7930", "CVE-2017-5341", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-7922", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-7928", "CVE-2017-5342", "CVE-2016-7993", "CVE-2016-7986", "CVE-2016-7935", "CVE-2017-5205", "CVE-2016-7934", "CVE-2017-5486", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-8574", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2016-7974", "CVE-2016-7992", "CVE-2016-7932", "CVE-2017-5202", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-5483", "CVE-2016-7973", "CVE-2017-5482", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7927", "CVE-2017-5485", "CVE-2016-7933"], "modified": "2017-07-07T00:00:00", "id": "OPENVAS:703775", "href": "http://plugins.openvas.org/nasl.php?oid=703775", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3775.nasl 6607 2017-07-07 12:04:25Z cfischer $\n# Auto-generated from advisory DSA 3775-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\n\nif(description)\n{\n script_id(703775);\n script_version(\"$Revision: 6607 $\");\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\",\n \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\",\n \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\",\n \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\",\n \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\",\n \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\",\n \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\",\n \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\",\n \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\",\n \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\",\n \"CVE-2017-5486\");\n script_name(\"Debian Security Advisory DSA 3775-1 (tcpdump - security update)\");\n script_tag(name: \"last_modification\", value: \"$Date: 2017-07-07 14:04:25 +0200 (Fri, 07 Jul 2017) $\");\n script_tag(name: \"creation_date\", value: \"2017-01-29 00:00:00 +0100 (Sun, 29 Jan 2017)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name: \"solution_type\", value: \"VendorFix\");\n script_tag(name: \"qod_type\", value: \"package\");\n\n script_xref(name: \"URL\", value: \"http://www.debian.org/security/2017/dsa-3775.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name: \"affected\", value: \"tcpdump on Debian Linux\");\n script_tag(name: \"insight\", value: \"This program allows you to dump the\ntraffic on a network. tcpdump is able to examine IPv4, ICMPv4, IPv6, ICMPv6, UDP,\nTCP, SNMP, AFS BGP, RIP, PIM, DVMRP, IGMP, SMB, OSPF, NFS and many other packet\ntypes.\");\n script_tag(name: \"solution\", value: \"For the stable distribution (jessie),\nthese problems have been fixed in version 4.9.0-1~deb8u1.\n\nFor the testing distribution (stretch), these problems have been fixed\nin version 4.9.0-1.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 4.9.0-1.\n\nWe recommend that you upgrade your tcpdump packages.\");\n script_tag(name: \"summary\", value: \"Multiple vulnerabilities have been\ndiscovered in tcpdump, a command-line network traffic analyzer. These\nvulnerabilities might result in denial of service or the execution of arbitrary\ncode.\");\n script_tag(name: \"vuldetect\", value: \"This check tests the installed software\nversion using the apt package manager.\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isdpkgvuln(pkg:\"tcpdump\", ver:\"4.9.0-1~deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"tcpdump\", ver:\"4.9.0-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2019-05-29T18:34:26", "description": "Multiple vulnerabilities have been\ndiscovered in tcpdump, a command-line network traffic analyzer. These\nvulnerabilities might result in denial of service or the execution of arbitrary\ncode.", "cvss3": {}, "published": "2017-01-29T00:00:00", "type": "openvas", "title": "Debian Security Advisory DSA 3775-1 (tcpdump - security update)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7936", "CVE-2016-7983", "CVE-2016-7930", "CVE-2017-5341", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-7922", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-7928", "CVE-2017-5342", "CVE-2016-7993", "CVE-2016-7986", "CVE-2016-7935", "CVE-2017-5205", "CVE-2016-7934", "CVE-2017-5486", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-8574", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2016-7974", "CVE-2016-7992", "CVE-2016-7932", "CVE-2017-5202", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-5483", "CVE-2016-7973", "CVE-2017-5482", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7927", "CVE-2017-5485", "CVE-2016-7933"], "modified": "2019-03-18T00:00:00", "id": "OPENVAS:1361412562310703775", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310703775", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3775.nasl 14280 2019-03-18 14:50:45Z cfischer $\n# Auto-generated from advisory DSA 3775-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.703775\");\n script_version(\"$Revision: 14280 $\");\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\",\n \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\",\n \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\",\n \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\",\n \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\",\n \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\",\n \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\",\n \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\",\n \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\",\n \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\",\n \"CVE-2017-5486\");\n script_name(\"Debian Security Advisory DSA 3775-1 (tcpdump - security update)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-18 15:50:45 +0100 (Mon, 18 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2017-01-29 00:00:00 +0100 (Sun, 29 Jan 2017)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"http://www.debian.org/security/2017/dsa-3775.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB(8|9)\");\n script_tag(name:\"affected\", value:\"tcpdump on Debian Linux\");\n script_tag(name:\"solution\", value:\"For the stable distribution (jessie),\nthese problems have been fixed in version 4.9.0-1~deb8u1.\n\nFor the testing distribution (stretch), these problems have been fixed\nin version 4.9.0-1.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 4.9.0-1.\n\nWe recommend that you upgrade your tcpdump packages.\");\n script_tag(name:\"summary\", value:\"Multiple vulnerabilities have been\ndiscovered in tcpdump, a command-line network traffic analyzer. These\nvulnerabilities might result in denial of service or the execution of arbitrary\ncode.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software\nversion using the apt package manager.\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif((res = isdpkgvuln(pkg:\"tcpdump\", ver:\"4.9.0-1~deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"tcpdump\", ver:\"4.9.0-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:34:13", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2017-08-04T00:00:00", "type": "openvas", "title": "RedHat Update for tcpdump RHSA-2017:1871-01", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7936", "CVE-2016-7983", "CVE-2016-7930", "CVE-2015-0261", "CVE-2017-5341", "CVE-2015-2155", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-7922", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-7928", "CVE-2017-5342", "CVE-2016-7993", "CVE-2016-7986", "CVE-2016-7935", "CVE-2017-5205", "CVE-2016-7934", "CVE-2017-5486", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-8574", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2016-7974", "CVE-2016-7992", "CVE-2015-2154", "CVE-2016-7932", "CVE-2017-5202", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-5483", "CVE-2016-7973", "CVE-2015-2153", "CVE-2017-5482", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7927", "CVE-2017-5485", "CVE-2016-7933"], "modified": "2018-11-23T00:00:00", "id": "OPENVAS:1361412562310871861", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310871861", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_RHSA-2017_1871-01_tcpdump.nasl 12497 2018-11-23 08:28:21Z cfischer $\n#\n# RedHat Update for tcpdump RHSA-2017:1871-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.871861\");\n script_version(\"$Revision: 12497 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-23 09:28:21 +0100 (Fri, 23 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2017-08-04 12:47:08 +0530 (Fri, 04 Aug 2017)\");\n script_cve_id(\"CVE-2015-0261\", \"CVE-2015-2153\", \"CVE-2015-2154\", \"CVE-2015-2155\",\n \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\",\n \"CVE-2016-7926\", \"CVE-2016-7931\", \"CVE-2016-7936\", \"CVE-2016-7973\",\n \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\",\n \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\",\n \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\",\n \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\",\n \"CVE-2016-7985\", \"CVE-2016-8575\", \"CVE-2017-5341\", \"CVE-2017-5485\",\n \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\",\n \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\",\n \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\",\n \"CVE-2017-5486\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"RedHat Update for tcpdump RHSA-2017:1871-01\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'tcpdump'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"The tcpdump packages contain the tcpdump\n utility for monitoring network traffic. The tcpdump utility can capture and\n display the packet headers on a particular network interface or on all\n interfaces. The following packages have been upgraded to a later upstream\n version: tcpdump (4.9.0). (BZ#1422473) Security Fix(es): * Multiple out of\n bounds read and integer overflow vulnerabilities were found in tcpdump affecting\n the decoding of various protocols. An attacker could create a crafted pcap file\n or send specially crafted packets to the network segment where tcpdump is\n running in live capture mode (without -w) which could cause it to display\n incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153,\n CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924,\n CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,\n CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934,\n CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939,\n CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983,\n CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993,\n CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204,\n CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483,\n CVE-2017-5484, CVE-2017-5485, CVE-2017-5486) Red Hat would like to thank the\n Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924,\n CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,\n CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934,\n CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939,\n CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983,\n CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993,\n CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204,\n CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483,\n CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486. Additional Changes: For\n detailed information on changes in this release, see the Red Hat Enterprise\n Linux 7.4 Release Notes linked from the References section.\");\n script_tag(name:\"affected\", value:\"tcpdump on Red Hat Enterprise Linux Server (v. 7)\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"RHSA\", value:\"2017:1871-01\");\n script_xref(name:\"URL\", value:\"https://www.redhat.com/archives/rhsa-announce/2017-August/msg00005.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\", re:\"ssh/login/release=RHENT_7\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"RHENT_7\")\n{\n\n if ((res = isrpmvuln(pkg:\"tcpdump\", rpm:\"tcpdump~4.9.0~5.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"tcpdump-debuginfo\", rpm:\"tcpdump-debuginfo~4.9.0~5.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:34:22", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2017-02-20T00:00:00", "type": "openvas", "title": "Fedora Update for tcpdump FEDORA-2017-7ecbc90157", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7936", "CVE-2016-7983", "CVE-2016-7930", "CVE-2017-5341", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-7922", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-7928", "CVE-2017-5342", "CVE-2016-7993", "CVE-2016-7986", "CVE-2016-7935", "CVE-2017-5205", "CVE-2016-7934", "CVE-2017-5486", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-8574", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2016-7974", "CVE-2016-7992", "CVE-2016-7932", "CVE-2017-5202", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-5483", "CVE-2016-7973", "CVE-2017-5482", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7927", "CVE-2017-5485", "CVE-2016-7933"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310872340", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310872340", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for tcpdump FEDORA-2017-7ecbc90157\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.872340\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2017-02-20 11:37:42 +0100 (Mon, 20 Feb 2017)\");\n script_cve_id(\"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\",\n \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\",\n \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\",\n \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\",\n \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\",\n \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\",\n \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\",\n \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\",\n \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\",\n \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\",\n \"CVE-2017-5486\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for tcpdump FEDORA-2017-7ecbc90157\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'tcpdump'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"tcpdump on Fedora 25\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_xref(name:\"FEDORA\", value:\"2017-7ecbc90157\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VBUINM5KB5DMV72ZZEFB5U6ZJTMG7SFO\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC25\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC25\")\n{\n\n if ((res = isrpmvuln(pkg:\"tcpdump\", rpm:\"tcpdump~4.9.0~1.fc25\", rls:\"FC25\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-01-27T18:35:22", "description": "The remote host is missing an update for the Huawei EulerOS\n ", "cvss3": {}, "published": "2020-01-23T00:00:00", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2017-1180)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7936", "CVE-2016-7983", "CVE-2016-7930", "CVE-2015-0261", "CVE-2017-5341", "CVE-2015-2155", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-7922", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-7928", "CVE-2017-5342", "CVE-2016-7993", "CVE-2016-7986", "CVE-2016-7935", "CVE-2017-5205", "CVE-2016-7934", "CVE-2017-5486", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-8574", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2016-7974", "CVE-2016-7992", "CVE-2015-2154", "CVE-2016-7932", "CVE-2017-5202", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-5483", "CVE-2016-7973", "CVE-2015-2153", "CVE-2017-5482", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7927", "CVE-2017-5485", "CVE-2016-7933"], "modified": "2020-01-23T00:00:00", "id": "OPENVAS:1361412562311220171180", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220171180", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2017.1180\");\n script_version(\"2020-01-23T10:56:26+0000\");\n script_cve_id(\"CVE-2015-0261\", \"CVE-2015-2153\", \"CVE-2015-2154\", \"CVE-2015-2155\", \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-23 10:56:26 +0000 (Thu, 23 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 10:56:26 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2017-1180)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROS-2\\.0SP2\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2017-1180\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2017-1180\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'tcpdump' package(s) announced via the EulerOS-SA-2017-1180 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\");\n\n script_tag(name:\"affected\", value:\"'tcpdump' package(s) on Huawei EulerOS V2.0SP2.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROS-2.0SP2\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"tcpdump\", rpm:\"tcpdump~4.9.0~5\", rls:\"EULEROS-2.0SP2\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-01-27T18:39:18", "description": "The remote host is missing an update for the Huawei EulerOS\n ", "cvss3": {}, "published": "2020-01-23T00:00:00", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2017-1179)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-7936", "CVE-2016-7983", "CVE-2016-7930", "CVE-2015-0261", "CVE-2017-5341", "CVE-2015-2155", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-7922", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-7928", "CVE-2017-5342", "CVE-2016-7993", "CVE-2016-7986", "CVE-2016-7935", "CVE-2017-5205", "CVE-2016-7934", "CVE-2017-5486", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-8574", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2016-7974", "CVE-2016-7992", "CVE-2015-2154", "CVE-2016-7932", "CVE-2017-5202", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-5483", "CVE-2016-7973", "CVE-2015-2153", "CVE-2017-5482", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-7927", "CVE-2017-5485", "CVE-2016-7933"], "modified": "2020-01-23T00:00:00", "id": "OPENVAS:1361412562311220171179", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220171179", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2017.1179\");\n script_version(\"2020-01-23T10:55:46+0000\");\n script_cve_id(\"CVE-2015-0261\", \"CVE-2015-2153\", \"CVE-2015-2154\", \"CVE-2015-2155\", \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\", \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\", \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\", \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\", \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\", \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\", \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\", \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\", \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\", \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\", \"CVE-2017-5486\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-23 10:55:46 +0000 (Thu, 23 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 10:55:46 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2017-1179)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROS-2\\.0SP1\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2017-1179\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2017-1179\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'tcpdump' package(s) announced via the EulerOS-SA-2017-1179 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\");\n\n script_tag(name:\"affected\", value:\"'tcpdump' package(s) on Huawei EulerOS V2.0SP1.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROS-2.0SP1\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"tcpdump\", rpm:\"tcpdump~4.9.0~5\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-09-24T15:05:29", "description": "This host is running Apple Mac OS X and\n is prone to multiple vulnerabilities.", "cvss3": {}, "published": "2017-03-31T00:00:00", "type": "openvas", "title": "Apple Mac OS X Multiple Vulnerabilities-HT207615", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-2423", "CVE-2017-2430", "CVE-2016-7056", "CVE-2016-7936", "CVE-2016-7983", "CVE-2016-9536", "CVE-2017-2486", "CVE-2016-2161", "CVE-2016-7930", "CVE-2017-2461", "CVE-2017-5341", "CVE-2016-10011", "CVE-2017-2450", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-3619", "CVE-2016-7922", "CVE-2016-10009", "CVE-2016-9540", "CVE-2016-9935", "CVE-2017-2441", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-8743", "CVE-2017-2431", "CVE-2017-2435", "CVE-2017-2422", "CVE-2016-10010", "CVE-2017-2439", "CVE-2017-2402", "CVE-2016-7928", "CVE-2017-5342", "CVE-2017-2420", "CVE-2017-2379", "CVE-2017-2428", "CVE-2016-7993", "CVE-2017-2437", "CVE-2017-2483", "CVE-2016-7986", "CVE-2017-2456", "CVE-2017-2485", "CVE-2017-2443", "CVE-2017-2418", "CVE-2017-2381", "CVE-2017-2489", "CVE-2016-9539", "CVE-2016-7935", "CVE-2017-2451", "CVE-2017-5205", "CVE-2017-2406", "CVE-2016-7934", "CVE-2016-4688", "CVE-2016-9535", "CVE-2017-5486", "CVE-2017-2474", "CVE-2016-5636", "CVE-2017-2472", "CVE-2017-2390", "CVE-2017-2417", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-7585", "CVE-2017-2388", "CVE-2017-7070", "CVE-2016-9537", "CVE-2016-8574", "CVE-2016-9538", "CVE-2017-2462", "CVE-2017-2487", "CVE-2016-10160", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2017-2449", "CVE-2017-6974", "CVE-2017-2421", "CVE-2017-2427", "CVE-2016-7974", "CVE-2017-5029", "CVE-2017-2410", "CVE-2017-2482", "CVE-2017-2477", "CVE-2016-10159", "CVE-2017-2458", "CVE-2016-7992", "CVE-2017-2448", "CVE-2016-10012", "CVE-2017-2401", "CVE-2017-2409", "CVE-2016-7932", "CVE-2016-8740", "CVE-2017-2392", "CVE-2017-2413", "CVE-2017-2408", "CVE-2017-5202", "CVE-2017-2467", "CVE-2016-5387", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-2490", "CVE-2017-5483", "CVE-2016-9586", "CVE-2017-2407", "CVE-2017-2438", "CVE-2016-7973", "CVE-2017-2426", "CVE-2017-2436", "CVE-2017-2473", "CVE-2016-10161", "CVE-2017-2403", "CVE-2017-2416", "CVE-2017-5482", "CVE-2017-2457", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-9533", "CVE-2017-2398", "CVE-2017-2440", "CVE-2016-10158", "CVE-2016-7927", "CVE-2016-0736", "CVE-2017-5485", "CVE-2017-2425", "CVE-2017-2429", "CVE-2017-2432", "CVE-2016-7933", "CVE-2017-2478"], "modified": "2019-09-20T00:00:00", "id": "OPENVAS:1361412562310810728", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310810728", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Apple Mac OS X Multiple Vulnerabilities-HT207615\n#\n# Authors:\n# Antu Sanadi <santu@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.810728\");\n script_version(\"2019-09-20T11:01:01+0000\");\n script_cve_id(\"CVE-2016-0736\", \"CVE-2016-2161\", \"CVE-2016-5387\", \"CVE-2016-8740\",\n \"CVE-2016-8743\", \"CVE-2016-10158\", \"CVE-2016-10159\", \"CVE-2016-10160\",\n \"CVE-2016-10161\", \"CVE-2016-9935\", \"CVE-2017-2421\", \"CVE-2017-2438\",\n \"CVE-2017-2430\", \"CVE-2017-2462\", \"CVE-2017-2420\", \"CVE-2017-2427\",\n \"CVE-2017-2449\", \"CVE-2017-2379\", \"CVE-2017-2417\", \"CVE-2017-2431\",\n \"CVE-2017-2435\", \"CVE-2017-2450\", \"CVE-2017-2461\", \"CVE-2016-9586\",\n \"CVE-2016-7585\", \"CVE-2017-2429\", \"CVE-2017-2487\", \"CVE-2017-2406\",\n \"CVE-2017-2407\", \"CVE-2017-2439\", \"CVE-2017-2428\", \"CVE-2017-2418\",\n \"CVE-2017-2426\", \"CVE-2017-2416\", \"CVE-2017-2467\", \"CVE-2017-2489\",\n \"CVE-2016-3619\", \"CVE-2017-2443\", \"CVE-2017-2408\", \"CVE-2017-2436\",\n \"CVE-2017-2437\", \"CVE-2017-2388\", \"CVE-2017-2398\", \"CVE-2017-2401\",\n \"CVE-2017-2410\", \"CVE-2017-2440\", \"CVE-2017-2456\", \"CVE-2017-2472\",\n \"CVE-2017-2473\", \"CVE-2017-2474\", \"CVE-2017-2478\", \"CVE-2017-2482\",\n \"CVE-2017-2483\", \"CVE-2017-2458\", \"CVE-2017-2448\", \"CVE-2017-2390\",\n \"CVE-2017-2441\", \"CVE-2017-2402\", \"CVE-2017-2392\", \"CVE-2017-2457\",\n \"CVE-2017-2409\", \"CVE-2017-2422\", \"CVE-2016-10009\", \"CVE-2016-10010\",\n \"CVE-2016-10011\", \"CVE-2016-10012\", \"CVE-2016-7056\", \"CVE-2017-2403\",\n \"CVE-2016-5636\", \"CVE-2017-2413\", \"CVE-2017-2423\", \"CVE-2017-2451\",\n \"CVE-2017-2485\", \"CVE-2017-2425\", \"CVE-2017-2381\", \"CVE-2017-6974\",\n \"CVE-2016-7922\", \"CVE-2016-7923\", \"CVE-2016-7924\", \"CVE-2016-7925\",\n \"CVE-2016-7926\", \"CVE-2016-7927\", \"CVE-2016-7928\", \"CVE-2016-7929\",\n \"CVE-2016-7930\", \"CVE-2016-7931\", \"CVE-2016-7932\", \"CVE-2016-7933\",\n \"CVE-2016-7934\", \"CVE-2016-7935\", \"CVE-2016-7936\", \"CVE-2016-7937\",\n \"CVE-2016-7938\", \"CVE-2016-7939\", \"CVE-2016-7940\", \"CVE-2016-7973\",\n \"CVE-2016-7974\", \"CVE-2016-7975\", \"CVE-2016-7983\", \"CVE-2016-7984\",\n \"CVE-2016-7985\", \"CVE-2016-7986\", \"CVE-2016-7992\", \"CVE-2016-7993\",\n \"CVE-2016-8574\", \"CVE-2016-8575\", \"CVE-2017-5202\", \"CVE-2017-5203\",\n \"CVE-2017-5204\", \"CVE-2017-5205\", \"CVE-2017-5341\", \"CVE-2017-5342\",\n \"CVE-2017-5482\", \"CVE-2017-5483\", \"CVE-2017-5484\", \"CVE-2017-5485\",\n \"CVE-2017-5486\", \"CVE-2016-9533\", \"CVE-2016-9535\",\n \"CVE-2016-9536\", \"CVE-2016-9537\", \"CVE-2016-9538\", \"CVE-2016-9539\",\n \"CVE-2016-9540\", \"CVE-2017-2486\", \"CVE-2016-4688\", \"CVE-2017-2432\",\n \"CVE-2017-2490\", \"CVE-2017-7070\", \"CVE-2017-2477\", \"CVE-2017-5029\");\n script_bugtraq_id(95078, 95076, 91816, 94650, 95077, 95764, 95774, 95783, 95768,\n 94846, 97140, 97137, 95019, 97146, 85919, 97147, 97134, 95375,\n 96767, 94968, 94972, 94977, 94975, 91247, 97132, 95852, 94742,\n 94744, 94745, 94746, 94753, 94754, 94747, 97300, 97303);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-09-20 11:01:01 +0000 (Fri, 20 Sep 2019)\");\n script_tag(name:\"creation_date\", value:\"2017-03-31 17:37:14 +0530 (Fri, 31 Mar 2017)\");\n script_name(\"Apple Mac OS X Multiple Vulnerabilities-HT207615\");\n\n script_tag(name:\"summary\", value:\"This host is running Apple Mac OS X and\n is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists. For details\n refer the reference links.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow attacker\n to execute arbitrary code or cause a denial of service (memory corruption),\n gain access to potentially sensitive information, bypass certain protection\n mechanism and have other impacts.\");\n\n script_tag(name:\"affected\", value:\"Apple Mac OS X version 10.12.x through\n 10.12.3\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Apple Mac OS X version\n 10.12.4 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_xref(name:\"URL\", value:\"https://support.apple.com/en-us/HT207615\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Mac OS X Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/osx_name\", \"ssh/login/osx_version\", re:\"ssh/login/osx_version=^10\\.12\");\n exit(0);\n}\n\ninclude(\"version_func.inc\");\n\nosName = get_kb_item(\"ssh/login/osx_name\");\nif(!osName)\n exit(0);\n\nosVer = get_kb_item(\"ssh/login/osx_version\");\nif(!osVer){\n exit(0);\n}\n\nif(\"Mac OS X\" >< osName)\n{\n if(version_in_range(version:osVer, test_version:\"10.12\", test_version2:\"10.12.3\"))\n {\n report = report_fixed_ver(installed_version:osVer, fixed_version:\"10.12.4\");\n security_message(data:report);\n exit(0);\n }\n exit(99);\n}\n\nexit(0);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "archlinux": [{"lastseen": "2023-12-03T22:48:21", "description": "Arch Linux Security Advisory ASA-201702-1\n=========================================\n\nSeverity: Critical\nDate : 2017-02-02\nCVE-ID : CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925\nCVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7929\nCVE-2016-7930 CVE-2016-7931 CVE-2016-7932 CVE-2016-7933\nCVE-2016-7934 CVE-2016-7935 CVE-2016-7936 CVE-2016-7937\nCVE-2016-7938 CVE-2016-7939 CVE-2016-7940 CVE-2016-7973\nCVE-2016-7974 CVE-2016-7975 CVE-2016-7983 CVE-2016-7984\nCVE-2016-7985 CVE-2016-7986 CVE-2016-7992 CVE-2016-7993\nCVE-2016-8574 CVE-2016-8575 CVE-2017-5202 CVE-2017-5203\nCVE-2017-5204 CVE-2017-5205 CVE-2017-5341 CVE-2017-5342\nCVE-2017-5482 CVE-2017-5483 CVE-2017-5484 CVE-2017-5485\nCVE-2017-5486\nPackage : tcpdump\nType : arbitrary code execution\nRemote : Yes\nLink : https://security.archlinux.org/AVG-161\n\nSummary\n=======\n\nThe package tcpdump before version 4.9.0-1 is vulnerable to arbitrary\ncode execution.\n\nResolution\n==========\n\nUpgrade to 4.9.0-1.\n\n# pacman -Syu \"tcpdump>=4.9.0-1\"\n\nThe problems have been fixed upstream in version 4.9.0.\n\nWorkaround\n==========\n\nNone.\n\nDescription\n===========\n\n- CVE-2016-7922 (arbitrary code execution)\n\nThe AH parser in tcpdump before 4.9.0 has a buffer overflow in print-\nah.c:ah_print().\n\n- CVE-2016-7923 (arbitrary code execution)\n\nThe ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-\narp.c:arp_print().\n\n- CVE-2016-7924 (arbitrary code execution)\n\nThe ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-\natm.c:oam_print().\n\n- CVE-2016-7925 (arbitrary code execution)\n\nThe compressed SLIP parser in tcpdump before 4.9.0 has a buffer\noverflow in print-sl.c:sl_if_print().\n\n- CVE-2016-7926 (arbitrary code execution)\n\nThe Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-ether.c:ethertype_print().\n\n- CVE-2016-7927 (arbitrary code execution)\n\nThe IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-802_11.c:ieee802_11_radio_print().\n\n- CVE-2016-7928 (arbitrary code execution)\n\nThe IPComp parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-ipcomp.c:ipcomp_print().\n\n- CVE-2016-7929 (arbitrary code execution)\n\nThe Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer\noverflow in print-juniper.c:juniper_parse_header().\n\n- CVE-2016-7930 (arbitrary code execution)\n\nThe LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-llc.c:llc_print().\n\n- CVE-2016-7931 (arbitrary code execution)\n\nThe MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-\nmpls.c:mpls_print().\n\n- CVE-2016-7932 (arbitrary code execution)\n\nThe PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-\npim.c:pimv2_check_checksum().\n\n- CVE-2016-7933 (arbitrary code execution)\n\nThe PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-\nppp.c:ppp_hdlc_if_print().\n\n- CVE-2016-7934 (arbitrary code execution)\n\nThe RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-\nudp.c:rtcp_print().\n\n- CVE-2016-7935 (arbitrary code execution)\n\nThe RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-\nudp.c:rtp_print().\n\n- CVE-2016-7936 (arbitrary code execution)\n\nThe UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-\nudp.c:udp_print().\n\n- CVE-2016-7937 (arbitrary code execution)\n\nThe VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-\nudp.c:vat_print().\n\n- CVE-2016-7938 (arbitrary code execution)\n\nThe ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in\nprint-zeromq.c:zmtp1_print_frame().\n\n- CVE-2016-7939 (arbitrary code execution)\n\nThe GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-\ngre.c, multiple functions.\n\n- CVE-2016-7940 (arbitrary code execution)\n\nThe STP parser in tcpdump before 4.9.0 has a buffer overflow in print-\nstp.c, multiple functions.\n\n- CVE-2016-7973 (arbitrary code execution)\n\nThe AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-atalk.c, multiple functions.\n\n- CVE-2016-7974 (arbitrary code execution)\n\nThe IP parser in tcpdump before 4.9.0 has a buffer overflow in print-\nip.c, multiple functions.\n\n- CVE-2016-7975 (arbitrary code execution)\n\nThe TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-\ntcp.c:tcp_print().\n\n- CVE-2016-7983 (arbitrary code execution)\n\nThe BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-bootp.c:bootp_print().\n\n- CVE-2016-7984 (arbitrary code execution)\n\nThe TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-\ntftp.c:tftp_print().\n\n- CVE-2016-7985 (arbitrary code execution)\n\nThe CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-calm-fast.c:calm_fast_print().\n\n- CVE-2016-7986 (arbitrary code execution)\n\nThe GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow\nin print-geonet.c, multiple functions.\n\n- CVE-2016-7992 (arbitrary code execution)\n\nThe Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer\noverflow in print-cip.c:cip_if_print().\n\n- CVE-2016-7993 (arbitrary code execution)\n\nA bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause\na buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP,\nlightweight resolver protocol, PIM).\n\n- CVE-2016-8574 (arbitrary code execution)\n\nThe FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-fr.c:frf15_print().\n\n- CVE-2016-8575 (arbitrary code execution)\n\nThe Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-fr.c:q933_print(), a different vulnerability than CVE-2017-5482.\n\n- CVE-2017-5202 (arbitrary code execution)\n\nThe ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-isoclns.c:clnp_print().\n\n- CVE-2017-5203 (arbitrary code execution)\n\nThe BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-bootp.c:bootp_print().\n\n- CVE-2017-5204 (arbitrary code execution)\n\nThe IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-\nip6.c:ip6_print().\n\n- CVE-2017-5205 (arbitrary code execution)\n\nThe ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-isakmp.c:ikev2_e_print().\n\n- CVE-2017-5341 (arbitrary code execution)\n\nThe OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-\notv.c:otv_print().\n\n- CVE-2017-5342 (arbitrary code execution)\n\nIn tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve,\nGRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in\nprint-ether.c:ether_print().\n\n- CVE-2017-5482 (arbitrary code execution)\n\nThe Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-fr.c:q933_print(), a different vulnerability than CVE-2016-8575.\n\n- CVE-2017-5483 (arbitrary code execution)\n\nThe SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-\nsnmp.c:asn1_parse().\n\n- CVE-2017-5484 (arbitrary code execution)\n\nThe ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-\natm.c:sig_print().\n\n- CVE-2017-5485 (arbitrary code execution)\n\nThe ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in\naddrtoname.c:lookup_nsap().\n\n- CVE-2017-5486 (arbitrary code execution)\n\nThe ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in\nprint-isoclns.c:clnp_print().\n\nImpact\n======\n\nA remote attacker can execute arbitrary code on the affected host by\ncrafting network packets.\n\nReferences\n==========\n\nhttps://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1494526.html\nhttps://security.archlinux.org/CVE-2016-7922\nhttps://security.archlinux.org/CVE-2016-7923\nhttps://security.archlinux.org/CVE-2016-7924\nhttps://security.archlinux.org/CVE-2016-7925\nhttps://security.archlinux.org/CVE-2016-7926\nhttps://security.archlinux.org/CVE-2016-7927\nhttps://security.archlinux.org/CVE-2016-7928\nhttps://security.archlinux.org/CVE-2016-7929\nhttps://security.archlinux.org/CVE-2016-7930\nhttps://security.archlinux.org/CVE-2016-7931\nhttps://security.archlinux.org/CVE-2016-7932\nhttps://security.archlinux.org/CVE-2016-7933\nhttps://security.archlinux.org/CVE-2016-7934\nhttps://security.archlinux.org/CVE-2016-7935\nhttps://security.archlinux.org/CVE-2016-7936\nhttps://security.archlinux.org/CVE-2016-7937\nhttps://security.archlinux.org/CVE-2016-7938\nhttps://security.archlinux.org/CVE-2016-7939\nhttps://security.archlinux.org/CVE-2016-7940\nhttps://security.archlinux.org/CVE-2016-7973\nhttps://security.archlinux.org/CVE-2016-7974\nhttps://security.archlinux.org/CVE-2016-7975\nhttps://security.archlinux.org/CVE-2016-7983\nhttps://security.archlinux.org/CVE-2016-7984\nhttps://security.archlinux.org/CVE-2016-7985\nhttps://security.archlinux.org/CVE-2016-7986\nhttps://security.archlinux.org/CVE-2016-7992\nhttps://security.archlinux.org/CVE-2016-7993\nhttps://security.archlinux.org/CVE-2016-8574\nhttps://security.archlinux.org/CVE-2016-8575\nhttps://security.archlinux.org/CVE-2017-5202\nhttps://security.archlinux.org/CVE-2017-5203\nhttps://security.archlinux.org/CVE-2017-5204\nhttps://security.archlinux.org/CVE-2017-5205\nhttps://security.archlinux.org/CVE-2017-5341\nhttps://security.archlinux.org/CVE-2017-5342\nhttps://security.archlinux.org/CVE-2017-5482\nhttps://security.archlinux.org/CVE-2017-5483\nhttps://security.archlinux.org/CVE-2017-5484\nhttps://security.archlinux.org/CVE-2017-5485\nhttps://security.archlinux.org/CVE-2017-5486", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-02-02T00:00:00", "type": "archlinux", "title": "[ASA-201702-1] tcpdump: arbitrary code execution", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-02-02T00:00:00", "id": "ASA-201702-1", "href": "https://security.archlinux.org/ASA-201702-1", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "slackware": [{"lastseen": "2023-12-03T22:45:29", "description": "New tcpdump packages are available for Slackware 13.37, 14.0, 14.1, 14.2,\nand -current to fix security issues.\n\nNOTE: These updates also require the updated libpcap package.\n\nHere are the details from the Slackware 14.2 ChangeLog:\n\npatches/packages/tcpdump-4.9.0-i586-1_slack14.2.txz: Upgraded.\n Fixed bugs which allow an attacker to crash tcpdump (denial of service).\n For more information, see:\n https://vulners.com/cve/CVE-2016-7922\n https://vulners.com/cve/CVE-2016-7923\n https://vulners.com/cve/CVE-2016-7924\n https://vulners.com/cve/CVE-2016-7925\n https://vulners.com/cve/CVE-2016-7926\n https://vulners.com/cve/CVE-2016-7927\n https://vulners.com/cve/CVE-2016-7928\n https://vulners.com/cve/CVE-2016-7929\n https://vulners.com/cve/CVE-2016-7930\n https://vulners.com/cve/CVE-2016-7931\n https://vulners.com/cve/CVE-2016-7932\n https://vulners.com/cve/CVE-2016-7933\n https://vulners.com/cve/CVE-2016-7934\n https://vulners.com/cve/CVE-2016-7935\n https://vulners.com/cve/CVE-2016-7936\n https://vulners.com/cve/CVE-2016-7937\n https://vulners.com/cve/CVE-2016-7938\n https://vulners.com/cve/CVE-2016-7939\n https://vulners.com/cve/CVE-2016-7940\n https://vulners.com/cve/CVE-2016-7973\n https://vulners.com/cve/CVE-2016-7974\n https://vulners.com/cve/CVE-2016-7975\n https://vulners.com/cve/CVE-2016-7983\n https://vulners.com/cve/CVE-2016-7984\n https://vulners.com/cve/CVE-2016-7985\n https://vulners.com/cve/CVE-2016-7986\n https://vulners.com/cve/CVE-2016-7992\n https://vulners.com/cve/CVE-2016-7993\n https://vulners.com/cve/CVE-2016-8574\n https://vulners.com/cve/CVE-2016-8575\n https://vulners.com/cve/CVE-2017-5202\n https://vulners.com/cve/CVE-2017-5203\n https://vulners.com/cve/CVE-2017-5204\n https://vulners.com/cve/CVE-2017-5205\n https://vulners.com/cve/CVE-2017-5341\n https://vulners.com/cve/CVE-2017-5342\n https://vulners.com/cve/CVE-2017-5482\n https://vulners.com/cve/CVE-2017-5483\n https://vulners.com/cve/CVE-2017-5484\n https://vulners.com/cve/CVE-2017-5485\n https://vulners.com/cve/CVE-2017-5486\n (* Security fix *)\n\nWhere to find the new packages:\n\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\n\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\n\nUpdated package for Slackware 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/tcpdump-4.9.0-i486-1_slack13.37.txz\n\nUpdated package for Slackware x86_64 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/tcpdump-4.9.0-x86_64-1_slack13.37.txz\n\nUpdated package for Slackware 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/tcpdump-4.9.0-i486-1_slack14.0.txz\n\nUpdated package for Slackware x86_64 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/tcpdump-4.9.0-x86_64-1_slack14.0.txz\n\nUpdated package for Slackware 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/tcpdump-4.9.0-i486-1_slack14.1.txz\n\nUpdated package for Slackware x86_64 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/tcpdump-4.9.0-x86_64-1_slack14.1.txz\n\nUpdated package for Slackware 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/tcpdump-4.9.0-i586-1_slack14.2.txz\n\nUpdated package for Slackware x86_64 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/tcpdump-4.9.0-x86_64-1_slack14.2.txz\n\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/tcpdump-4.9.0-i586-1.txz\n\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/tcpdump-4.9.0-x86_64-1.txz\n\n\nMD5 signatures:\n\nSlackware 13.37 package:\n9511f62c56fca52c1a5e7e3c019d13f1 tcpdump-4.9.0-i486-1_slack13.37.txz\n\nSlackware x86_64 13.37 package:\n363eedb14f568d59285421ab73854543 tcpdump-4.9.0-x86_64-1_slack13.37.txz\n\nSlackware 14.0 package:\ne4a3e6529f2d183e64abec02b6336fc1 tcpdump-4.9.0-i486-1_slack14.0.txz\n\nSlackware x86_64 14.0 package:\n4025510be6f69f299f2d2775a4eed86e tcpdump-4.9.0-x86_64-1_slack14.0.txz\n\nSlackware 14.1 package:\nb693f072d9ce8e1e2f542e05c049ac8b tcpdump-4.9.0-i486-1_slack14.1.txz\n\nSlackware x86_64 14.1 package:\n76109f2cf611d5a040db9d5d04628cae tcpdump-4.9.0-x86_64-1_slack14.1.txz\n\nSlackware 14.2 package:\na7c745161f5c4e96bc149941893b1a94 tcpdump-4.9.0-i586-1_slack14.2.txz\n\nSlackware x86_64 14.2 package:\ne36f1d88a2cd63e2aa1771d589fc53de tcpdump-4.9.0-x86_64-1_slack14.2.txz\n\nSlackware -current package:\nc60c97421c742cf02b64535593162f0f n/tcpdump-4.9.0-i586-1.txz\n\nSlackware x86_64 -current package:\n22ec2ccd2a28f965d8ce53788d0dfdd4 n/tcpdump-4.9.0-x86_64-1.txz\n\n\nInstallation instructions:\n\nUpgrade the package as root:\n > upgradepkg tcpdump-4.9.0-i586-1_slack14.2.txz\n\nNOTE: These updates also require the updated libpcap package:\n\n > upgradepkg libpcap-1.8.1-i586-1_slack14.2.txz", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-02-10T21:09:44", "type": "slackware", "title": "[slackware-security] tcpdump", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-02-10T21:09:44", "id": "SSA-2017-041-04", "href": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.678407", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "ubuntu": [{"lastseen": "2023-12-04T00:12:00", "description": "## Releases\n\n * Ubuntu 16.10 \n * Ubuntu 16.04 ESM\n * Ubuntu 14.04 ESM\n * Ubuntu 12.04 \n\n## Packages\n\n * tcpdump \\- command-line network traffic analyzer\n\nIt was discovered that tcpdump incorrectly handled certain packets. A \nremote attacker could use this issue to cause tcpdump to crash, resulting \nin a denial of service, or possibly execute arbitrary code.\n\nIn the default installation, attackers would be isolated by the tcpdump \nAppArmor profile.\n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-02-21T00:00:00", "type": "ubuntu", "title": "tcpdump vulnerabilities", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-02-21T00:00:00", "id": "USN-3205-1", "href": "https://ubuntu.com/security/notices/USN-3205-1", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "debian": [{"lastseen": "2023-12-02T17:00:31", "description": "Package : tcpdump\nVersion : 4.9.0-1~deb7u1\nCVE ID : CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925 \n CVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7929 \n CVE-2016-7930 CVE-2016-7931 CVE-2016-7932 CVE-2016-7933 \n CVE-2016-7934 CVE-2016-7935 CVE-2016-7936 CVE-2016-7937 \n CVE-2016-7938 CVE-2016-7939 CVE-2016-7940 CVE-2016-7973 \n CVE-2016-7974 CVE-2016-7975 CVE-2016-7983 CVE-2016-7984 \n CVE-2016-7985 CVE-2016-7986 CVE-2016-7992 CVE-2016-7993 \n CVE-2016-8574 CVE-2016-8575 CVE-2017-5202 CVE-2017-5203 \n CVE-2017-5204 CVE-2017-5205 CVE-2017-5341 CVE-2017-5342 \n CVE-2017-5482 CVE-2017-5483 CVE-2017-5484 CVE-2017-5485 \n CVE-2017-5486\n\n\nMultiple vulnerabilities have been discovered in tcpdump, a command-line\nnetwork traffic analyzer. These vulnerabilities might result in denial of\nservice or the execution of arbitrary code.\n\nCVE-2016-7922\n\n Buffer overflow in parser.\n\nCVE-2016-7923\n\n Buffer overflow in parser.\n\nCVE-2016-7924\n\n Buffer overflow in parser.\n\nCVE-2016-7925\n\n Buffer overflow in parser.\n\nCVE-2016-7926\n\n Buffer overflow in parser.\n\nCVE-2016-7927\n\n Buffer overflow in parser.\n\nCVE-2016-7928\n\n Buffer overflow in parser.\n\nCVE-2016-7929\n\n Buffer overflow in parser.\n\nCVE-2016-7930\n\n Buffer overflow in parser.\n\nCVE-2016-7931\n\n Buffer overflow in parser.\n\nCVE-2016-7932\n\n Buffer overflow in parser.\n\nCVE-2016-7933\n\n Buffer overflow in parser.\n\nCVE-2016-7934\n\n Buffer overflow in parser.\n\nCVE-2016-7935\n\n Buffer overflow in parser.\n\nCVE-2016-7936\n\n Buffer overflow in parser.\n\nCVE-2016-7937\n\n Buffer overflow in parser.\n\nCVE-2016-7938\n\n Buffer overflow in parser.\n\nCVE-2016-7939\n\n Buffer overflow in parser.\n\nCVE-2016-7940\n\n Buffer overflow in parser.\n\nCVE-2016-7973\n\n Buffer overflow in parser.\n\nCVE-2016-7974\n\n Buffer overflow in parser.\n\nCVE-2016-7975\n\n Buffer overflow in parser.\n\nCVE-2016-7983\n\n Buffer overflow in parser.\n\nCVE-2016-7984\n\n Buffer overflow in parser.\n\nCVE-2016-7985\n\n Buffer overflow in parser.\n\nCVE-2016-7986\n\n Buffer overflow in parser.\n\nCVE-2016-7992\n\n Buffer overflow in parser.\n\nCVE-2016-7993\n\n Buffer overflow in parser.\n\nCVE-2016-8574\n\n Buffer overflow in parser.\n\nCVE-2016-8575\n\n Buffer overflow in parser.\n\nCVE-2017-5202\n\n Buffer overflow in parser.\n\nCVE-2017-5203\n\n Buffer overflow in parser.\n\nCVE-2017-5204\n\n Buffer overflow in parser.\n\nCVE-2017-5205\n\n Buffer overflow in parser.\n\nCVE-2017-5341\n\n Buffer overflow in parser.\n\nCVE-2017-5342\n\n Buffer overflow in parser.\n\nCVE-2017-5482\n\n Buffer overflow in parser.\n\nCVE-2017-5483\n\n Buffer overflow in parser.\n\nCVE-2017-5484\n\n Buffer overflow in parser.\n\nCVE-2017-5485\n\n Buffer overflow in parser.\n\nCVE-2017-5486\n\n Buffer overflow in parser.\n\nFor Debian 7 "Wheezy", these problems have been fixed in version\n4.9.0-1~deb7u1.\n\nWe recommend that you upgrade your tcpdump packages.\n\nFurther information about Debian LTS security advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://wiki.debian.org/LTS\n\n- -- \n -------------- Ola Lundqvist --------------------\n/ opal@debian.org GPG fingerprint \\\n| ola@inguza.com 22F2 32C6 B1E0 F4BF 2B26 |\n| http://inguza.com/ 0A6A 5E90 DCFA 9426 876F /\n -------------------------------------------------", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-01-30T22:07:17", "type": "debian", "title": "[SECURITY] [DLA 809-1] tcpdump security update", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-01-30T22:07:17", "id": "DEBIAN:DLA-809-1:1DE9C", "href": "https://lists.debian.org/debian-lts-announce/2017/01/msg00046.html", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2023-12-03T11:18:58", "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-3775-1 security@debian.org\nhttps://www.debian.org/security/ Moritz Muehlenhoff\nJanuary 29, 2017 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : tcpdump\nCVE ID : CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925 \n CVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7929 \n CVE-2016-7930 CVE-2016-7931 CVE-2016-7932 CVE-2016-7933 \n CVE-2016-7934 CVE-2016-7935 CVE-2016-7936 CVE-2016-7937 \n CVE-2016-7938 CVE-2016-7939 CVE-2016-7940 CVE-2016-7973 \n CVE-2016-7974 CVE-2016-7975 CVE-2016-7983 CVE-2016-7984 \n CVE-2016-7985 CVE-2016-7986 CVE-2016-7992 CVE-2016-7993 \n CVE-2016-8574 CVE-2016-8575 CVE-2017-5202 CVE-2017-5203 \n CVE-2017-5204 CVE-2017-5205 CVE-2017-5341 CVE-2017-5342 \n CVE-2017-5482 CVE-2017-5483 CVE-2017-5484 CVE-2017-5485 \n CVE-2017-5486\n\nMultiple vulnerabilities have been discovered in tcpdump, a command-line\nnetwork traffic analyzer. These vulnerabilities might result in denial\nof service or the execution of arbitrary code.\n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 4.9.0-1~deb8u1.\n\nFor the testing distribution (stretch), these problems have been fixed\nin version 4.9.0-1.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 4.9.0-1.\n\nWe recommend that you upgrade your tcpdump packages.\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-01-29T17:24:15", "type": "debian", "title": "[SECURITY] [DSA 3775-1] tcpdump security update", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-01-29T17:24:15", "id": "DEBIAN:DSA-3775-1:CB279", "href": "https://lists.debian.org/debian-security-announce/2017/msg00026.html", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "oraclelinux": [{"lastseen": "2021-07-30T06:24:36", "description": "[14:4.9.0-5]\r\n- Resolves: #1441597; use bigger capture buffer than in upstream\r\n \n[14:4.9.0-4]\r\n- Drop downstream patch (drop root privileges)\r\n- Add libcap-ng as a new build dependency\r\n- Related: #1262283\r\n \n[14:4.9.0-3]\r\n- Fix tests according to our patches and libpcap version\r\n \n[14:4.9.0-2]\r\n- Use getnameinfo instead of gethostbyaddr\r\n \n[14:4.9.0-1]\r\n- New upstream version 4.9.0. Resolves: #1422473\r\n- Add legacy -P switch with warning. Related to #1422473 and #1292056\r\n \n[14:4.5.1-6]\r\n- Drop root before creating any dump file. Resolves: #1262283\r\n \n[14:4.5.1-5]\r\n- Use -Q instead of -P to set capture direction. Resolves: #1292056\r\n \n[14:4.5.1-4]\r\n- Fix segfault with --help option. Resolves: #1297812", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-08-07T00:00:00", "type": "oraclelinux", "title": "tcpdump security, bug fix, and enhancement update", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-08-07T00:00:00", "id": "ELSA-2017-1871", "href": "http://linux.oracle.com/errata/ELSA-2017-1871.html", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "redhat": [{"lastseen": "2023-11-29T10:41:39", "description": "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version: tcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es):\n\n* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "source": "nvd@nist.gov", "type": "Primary", "impactScore": 5.9}, "published": "2017-08-01T03:03:57", "type": "redhat", "title": "(RHSA-2017:1871) Moderate: tcpdump security, bug fix, and enhancement update", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2018-04-11T23:32:19", "id": "RHSA-2017:1871", "href": "https://access.redhat.com/errata/RHSA-2017:1871", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "fedora": [{"lastseen": "2020-12-21T08:17:54", "description": "Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a program to monitor network traffic. ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-02-14T15:52:15", "type": "fedora", "title": "[SECURITY] Fedora 25 Update: tcpdump-4.9.0-1.fc25", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-02-14T15:52:15", "id": "FEDORA:34999660FE11", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VBUINM5KB5DMV72ZZEFB5U6ZJTMG7SFO/", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "cloudfoundry": [{"lastseen": "2023-12-03T20:55:21", "description": "# \n\n# **Severity**\n\nMedium\n\n# **Vendor**\n\nCanonical Ubuntu\n\n# **Versions Affected**\n\n * Canonical Ubuntu 14.04 LTS\n\n# **Description**\n\nIt was discovered that tcpdump incorrectly handled certain packets. A remote attacker could use this issue to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code.\n\n \nIn the default installation, attackers would be isolated by the tcpdump AppArmor profile.\n\n# **Affected Cloud Foundry Products and Versions**\n\n_Severity is medium unless otherwise noted._\n\n * Cloud Foundry BOSH stemcells are vulnerable, including:\n * 3151.x versions prior to 3151.11\n * 3233.x versions prior to 3233.14\n * 3263.x versions prior to 3263.20\n * 3312.x versions prior to 3312.20\n * 3363.x versions prior to 3363.9\n * All versions of Cloud Foundry cflinuxfs2 prior to v1.103.0\n\n# **Mitigation**\n\nOSS users are strongly encouraged to follow one of the mitigations below:\n\n * The Cloud Foundry team recommends upgrading to the following BOSH stemcells:\n * Upgrade 3151.x versions to 3151.11 or later\n * Upgrade 3233.x versions to 3233.14 or later\n * Upgrade 3263.x versions to 3263.20 or later\n * Upgrade 3312.x versions to 3312.20 or later\n * Upgrade 3363.x versions to 3363.9 or later\n * The Cloud Foundry project recommends that Cloud Foundry deployments run with cflinuxfs2 v1.103.00 or later versions\n\n# **References**\n\n * [https://www.ubuntu.com/usn/usn-3205-1/](<https://www.ubuntu.com/usn/usn-3205-1/>)\n * [CVE-2016-7922](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7922>)\n * [CVE-2016-7923](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7923>)\n * [CVE-2016-7924](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7924>)\n * [CVE-2016-7925](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7925>)\n * [CVE-2016-7926](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7926>)\n * [CVE-2016-7927](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7927>)\n * [CVE-2016-7928](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7928>)\n * [CVE-2016-7929](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7929>)\n * [CVE-2016-7930](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7930>)\n * [CVE-2016-7931](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7931>)\n * [CVE-2016-7932](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7932>)\n * [CVE-2016-7933](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7933>)\n * [CVE-2016-7934](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7934>)\n * [CVE-2016-7935](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7935>)\n * [CVE-2016-7936](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7936>)\n * [CVE-2016-7937](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7937>)\n * [CVE-2016-7938](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7938>)\n * [CVE-2016-7939](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7939>)\n * [CVE-2016-7940](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7940>)\n * [CVE-2016-7973](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7973>)\n * [CVE-2016-7974](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7974>)\n * [CVE-2016-7975](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7975>)\n * [CVE-2016-7983](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7983>)\n * [CVE-2016-7984](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7984>)\n * [CVE-2016-7985](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7985>)\n * [CVE-2016-7986](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7986>)\n * [CVE-2016-7992](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7992>)\n * [CVE-2016-7993](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-7993>)\n * [CVE-2016-8574](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-8574>)\n * [CVE-2016-8575](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-8575>)\n * [CVE-2017-5202](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5202>)\n * [CVE-2017-5203](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5203>)\n * [CVE-2017-5204](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5204>)\n * [CVE-2017-5205](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5205>)\n * [CVE-2017-5341](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5341>)\n * [CVE-2017-5342](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5342>)\n * [CVE-2017-5482](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5482>)\n * [CVE-2017-5483](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5483>)\n * [CVE-2017-5484](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5484>)\n * [CVE-2017-5485](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5485>)\n * [CVE-2017-5486](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-5486>)\n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-03-14T00:00:00", "type": "cloudfoundry", "title": "USN-3205-1: tcpdump vulnerabilities | Cloud Foundry", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-03-14T00:00:00", "id": "CFOUNDRY:9AF6A00A0CE20D53208404A775157439", "href": "https://www.cloudfoundry.org/blog/usn-3205-1/", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "mageia": [{"lastseen": "2023-12-03T21:28:43", "description": "The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print(). (CVE-2016-7922) The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print(). (CVE-2016-7923) The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print(). (CVE-2016-7924) The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print(). (CVE-2016-7925) The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print(). (CVE-2016-7926) The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print(). (CVE-2016-7927) The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print(). (CVE-2016-7928) The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header(). (CVE-2016-7929) The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print(). (CVE-2016-7930) The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print(). (CVE-2016-7931) The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum(). (CVE-2016-7932) The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print(). (CVE-2016-7933) The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print(). (CVE-2016-7934) The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print(). (CVE-2016-7935) The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print(). (CVE-2016-7936) The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print(). (CVE-2016-7937) The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame(). (CVE-2016-7938) The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions. (CVE-2016-7939) The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions. (CVE-2016-7940) The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions. (CVE-2016-7973) The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions. (CVE-2016-7974) The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print(). (CVE-2016-7975) The BOOTP parser in tcpdump before 4.9.0 has buffer overflows in print-bootp.c:bootp_print(). (CVE-2016-7983 and CVE-2017-5203) The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print(). (CVE-2016-7984) The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print(). (CVE-2016-7985) The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions. (CVE-2016-7986) The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip_if_print(). (CVE-2016-7992) A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM). (CVE-2016-7993) The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print(). (CVE-2016-8574) The Q.933 parser in tcpdump before 4.9.0 has buffer overflows in print-fr.c:q933_print(). (CVE-2016-8575 and CVE-2017-5482) The ISO CLNS parser in tcpdump before 4.9.0 has buffer overflows in print-isoclns.c:clnp_print(). (CVE-2017-5202 and CVE-2017-5486) The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print(). (CVE-2017-5204) The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print(). (CVE-2017-5205) The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print(). (CVE-2017-5341) In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print(). (CVE-2017-5342) The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse(). (CVE-2017-5483) The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print(). (CVE-2017-5484) The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap(). (CVE-2017-5485) \n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-02-23T17:58:52", "type": "mageia", "title": "Updated libpcap/tcpdump packages fix security vulnerability\n", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-02-23T17:58:52", "id": "MGASA-2017-0061", "href": "https://advisories.mageia.org/MGASA-2017-0061.html", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "centos": [{"lastseen": "2023-12-03T21:29:56", "description": "**CentOS Errata and Security Advisory** CESA-2017:1871\n\n\nThe tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version: tcpdump (4.9.0). (BZ#1422473)\n\nSecurity Fix(es):\n\n* Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode (without -w) which could cause it to display incorrect data, crash or enter an infinite loop. (CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155, CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486)\n\nRed Hat would like to thank the Tcpdump project for reporting CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, and CVE-2017-5486.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.\n\n**Merged security bulletin from advisories:**\nhttps://lists.centos.org/pipermail/centos-cr-announce/2017-August/030840.html\n\n**Affected packages:**\ntcpdump\n\n**Upstream details at:**\nhttps://access.redhat.com/errata/RHSA-2017:1871", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-08-24T01:41:48", "type": "centos", "title": "tcpdump security update", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2015-0261", "CVE-2015-2153", "CVE-2015-2154", "CVE-2015-2155", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486"], "modified": "2017-08-24T01:41:48", "id": "CESA-2017:1871", "href": "https://lists.centos.org/pipermail/centos-cr-announce/2017-August/030840.html", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "apple": [{"lastseen": "2021-11-10T17:00:57", "description": "# About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite\n\nThis document describes the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the [Apple security updates](<https://support.apple.com/kb/HT201222>) page.\n\nFor more information about security, see the [Apple Product Security](<https://support.apple.com/kb/HT201220>) page. You can encrypt communications with Apple using the [Apple Product Security PGP Key](<https://support.apple.com/kb/HT201601>).\n\nApple security documents reference vulnerabilities by [CVE-ID](<http://cve.mitre.org/about/>) when possible.\n\n\n\n## macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite\n\nReleased March 27, 2017\n\n**apache**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A remote attacker may be able to cause a denial of service\n\nDescription: Multiple issues existed in Apache before 2.4.25. These were addressed by updating Apache to version 2.4.25.\n\nCVE-2016-0736\n\nCVE-2016-2161\n\nCVE-2016-5387\n\nCVE-2016-8740\n\nCVE-2016-8743\n\nEntry updated March 28, 2017\n\n**apache_mod_php**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Multiple issues existed in PHP before 5.6.30\n\nDescription: Multiple issues existed in PHP before 5.6.30. These were addressed by updating PHP to version 5.6.30.\n\nCVE-2016-10158\n\nCVE-2016-10159\n\nCVE-2016-10160\n\nCVE-2016-10161\n\nCVE-2016-9935\n\n**AppleGraphicsPowerManagement**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed through improved memory handling.\n\nCVE-2017-2421: @cocoahuke\n\n**AppleRAID**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A use after free issue was addressed through improved memory management.\n\nCVE-2017-2438: sss and Axis of 360Nirvanteam\n\n**Audio**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted audio file may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2430: an anonymous researcher working with Trend Micro\u2019s Zero Day Initiative\n\nCVE-2017-2462: an anonymous researcher working with Trend Micro\u2019s Zero Day Initiative\n\n**Bluetooth**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2420: Pekka Oikarainen, Matias Karhumaa and Marko Laakso of Synopsys Software Integrity Group\n\n**Bluetooth**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2427: Axis and sss of Qihoo 360 Nirvan Team\n\n**Bluetooth**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A use after free issue was addressed through improved memory management.\n\nCVE-2017-2449: sss and Axis from 360NirvanTeam\n\n**Carbon**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted .dfont file may lead to arbitrary code execution\n\nDescription: A buffer overflow existed in the handling of font files. This issue was addressed through improved bounds checking.\n\nCVE-2017-2379: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department, John Villamil, Doyensec\n\n**CoreGraphics**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted image may lead to a denial of service\n\nDescription: An infinite recursion was addressed through improved state management.\n\nCVE-2017-2417: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department\n\n**CoreMedia**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted .mov file may lead to arbitrary code execution\n\nDescription: A memory corruption issue existed in the handling of .mov files. This issue was addressed through improved memory management.\n\nCVE-2017-2431: kimyok of Tencent Security Platform Department\n\n**CoreText**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted font file may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2435: John Villamil, Doyensec\n\n**CoreText**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed through improved input validation.\n\nCVE-2017-2450: John Villamil, Doyensec\n\n**CoreText**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted text message may lead to application denial of service\n\nDescription: A resource exhaustion issue was addressed through improved input validation.\n\nCVE-2017-2461: Isaac Archambault of IDAoADI, an anonymous researcher\n\n**curl**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Maliciously crafted user input to libcurl API may allow arbitrary code execution\n\nDescription: A buffer overflow was addressed through improved bounds checking.\n\nCVE-2016-9586: Daniel Stenberg of Mozilla\n\n**EFI**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious Thunderbolt adapter may be able to recover the FileVault 2 encryption password\n\nDescription: An issue existed in the handling of DMA. This issue was addressed by enabling VT-d in EFI.\n\nCVE-2016-7585: Ulf Frisk (@UlfFrisk)\n\n**FinderKit**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Permissions may unexpectedly reset when sending links\n\nDescription: A permission issue existed in the handling of the Send Link feature of iCloud Sharing. This issue was addressed through improved permission controls.\n\nCVE-2017-2429: Raymond Wong DO of Arnot Ogden Medical Center\n\nEntry updated August 23, 2017\n\n**FontParser**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted font file may lead to arbitrary code execution\n\nDescription: Multiple memory corruption issues were addressed through improved input validation.\n\nCVE-2017-2487: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department\n\nCVE-2017-2406: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department\n\n**FontParser**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Parsing a maliciously crafted font file may lead to an unexpected application termination or arbitrary code execution\n\nDescription: Multiple memory corruption issues were addressed through improved input validation.\n\nCVE-2017-2407: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department\n\n**FontParser**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed through improved input validation.\n\nCVE-2017-2439: John Villamil, Doyensec\n\n**FontParser**\n\nAvailable for: OS X El Capitan v10.11.6 and OS X Yosemite v10.10.5\n\nImpact: Processing a maliciously crafted font file may lead to arbitrary code execution \n\nDescription: A buffer overflow existed in the handling of font files. This issue was addressed through improved bounds checking.\n\nCVE-2016-4688: Simon Huang of Alipay company\n\nEntry added April 11, 2017\n\n**HTTPProtocol**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious HTTP/2 server may be able to cause undefined behavior\n\nDescription: Multiple issues existed in nghttp2 before 1.17.0. These were addressed by updating nghttp2 to version 1.17.0.\n\nCVE-2017-2428\n\nEntry updated March 28, 2017\n\n**Hypervisor**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Applications using the Hypervisor framework may unexpectedly leak the CR8 control register between guest and host\n\nDescription: An information leakage issue was addressed through improved state management.\n\nCVE-2017-2418: Alex Fishman and Izik Eidus of Veertu Inc.\n\n**iBooks**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Parsing a maliciously crafted iBooks file may lead to local file disclosure\n\nDescription: An information leak existed in the handling of file URLs. This issue was addressed through improved URL handling.\n\nCVE-2017-2426: Craig Arendt of Stratum Security, Jun Kokatsu (@shhnjk)\n\n**ImageIO**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2416: Qidan He (\u4f55\u6dc7\u4e39, @flanker_hqd) of KeenLab, Tencent\n\n**ImageIO**\n\nAvailable for: macOS Sierra 10.12.3, OS X El Capitan v10.11.6, and OS X Yosemite v10.10.5\n\nImpact: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2432: an anonymous researcher working with Trend Micro's Zero Day Initiative\n\n**ImageIO**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted file may lead to an unexpected application termination or arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2467\n\n**ImageIO**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted image may lead to unexpected application termination\n\nDescription: An out-of-bound read existed in LibTIFF versions before 4.0.7. This was addressed by updating LibTIFF in ImageIO to version 4.0.7.\n\nCVE-2016-3619\n\n**Intel Graphics Driver**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges \n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2443: Ian Beer of Google Project Zero\n\n**Intel Graphics Driver**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to disclose kernel memory\n\nDescription: A validation issue was addressed through improved input sanitization.\n\nCVE-2017-2489: Ian Beer of Google Project Zero\n\nEntry added March 31, 2017\n\n**IOATAFamily**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2408: Yangkang (@dnpushme) of Qihoo360 Qex Team\n\n**IOFireWireAVC**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2436: Orr A, IBM Security\n\n**IOFireWireAVC**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A local attacker may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2437: Benjamin Gnahm (@mitp0sh) of Blue Frost Security\n\n**IOFireWireFamily**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to cause a denial of service\n\nDescription: A null pointer dereference was addressed through improved input validation.\n\nCVE-2017-2388: Brandon Azad, an anonymous researcher\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2398: Lufeng Li of Qihoo 360 Vulcan Team\n\nCVE-2017-2401: Lufeng Li of Qihoo 360 Vulcan Team\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: An input validation issue existed in the kernel. This issue was addressed through improved input validation.\n\nCVE-2017-2410: Apple\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: An integer overflow was addressed through improved input validation.\n\nCVE-2017-2440: an anonymous researcher\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with root privileges\n\nDescription: A race condition was addressed through improved memory handling.\n\nCVE-2017-2456: lokihardt of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A use after free issue was addressed through improved memory management.\n\nCVE-2017-2472: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2473: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: An off-by-one issue was addressed through improved bounds checking.\n\nCVE-2017-2474: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed through improved locking.\n\nCVE-2017-2478: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow issue was addressed through improved memory handling.\n\nCVE-2017-2482: Ian Beer of Google Project Zero\n\nCVE-2017-2483: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with elevated privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2490: Ian Beer of Google Project Zero, The UK's National Cyber Security Centre (NCSC)\n\nEntry added March 31, 2017\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: The screen may unexpectedly remain unlocked when the lid is closed\n\nDescription: An insufficient locking issue was addressed with improved state management.\n\nCVE-2017-7070: Ed McKenzie\n\nEntry added August 10, 2017\n\n**Keyboards**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code\n\nDescription: A buffer overflow was addressed through improved bounds checking.\n\nCVE-2017-2458: Shashank (@cyberboyIndia)\n\n**Keychain**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An attacker who is able to intercept TLS connections may be able to read secrets protected by iCloud Keychain.\n\nDescription: In certain circumstances, iCloud Keychain failed to validate the authenticity of OTR packets. This issue was addressed through improved validation.\n\nCVE-2017-2448: Alex Radocea of Longterm Security, Inc.\n\nEntry updated March 30, 2017\n\n**libarchive**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A local attacker may be able to change file system permissions on arbitrary directories\n\nDescription: A validation issue existed in the handling of symlinks. This issue was addressed through improved validation of symlinks.\n\nCVE-2017-2390: Omer Medan of enSilo Ltd\n\n**libc++abi**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Demangling a malicious C++ application may lead to arbitrary code execution\n\nDescription: A use after free issue was addressed through improved memory management.\n\nCVE-2017-2441\n\n**LibreSSL**\n\nAvailable for: macOS Sierra 10.12.3 and OS X El Capitan v10.11.6\n\nImpact: A local user may be able to leak sensitive user information\n\nDescription: A timing side channel allowed an attacker to recover keys. This issue was addressed by introducing constant time computation.\n\nCVE-2016-7056: Cesar Pereida Garc\u00eda and Billy Brumley (Tampere University of Technology)\n\n**libxslt**\n\nAvailable for: OS X El Capitan v10.11.6\n\nImpact: Multiple vulnerabilities in libxslt\n\nDescription: Multiple memory corruption issues were addressed through improved memory handling.\n\nCVE-2017-2477\n\nEntry added March 30, 2017\n\n**libxslt**\n\nAvailable for: macOS Sierra 10.12.3, OS X El Capitan v10.11.6, and Yosemite v10.10.5\n\nImpact: Multiple vulnerabilities in libxslt\n\nDescription: Multiple memory corruption issues were addressed through improved memory handling.\n\nCVE-2017-5029: Holger Fuhrmannek\n\nEntry added March 28, 2017\n\n**MCX Client**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Removing a configuration profile with multiple payloads may not remove Active Directory certificate trust\n\nDescription: An issue existed in profile uninstallation. This issue was addressed through improved cleanup.\n\nCVE-2017-2402: an anonymous researcher\n\n**Menus**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to disclose process memory\n\nDescription: An out-of-bounds read was addressed through improved input validation.\n\nCVE-2017-2409: Sergey Bylokhov\n\n**Multi-Touch**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with system privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2422: @cocoahuke\n\n**OpenSSH**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Multiple issues in OpenSSH\n\nDescription: Multiple issues existed in OpenSSH before version 7.4. These were addressed by updating OpenSSH to version 7.4.\n\nCVE-2016-10009\n\nCVE-2016-10010\n\nCVE-2016-10011\n\nCVE-2016-10012\n\n**OpenSSL**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A local user may be able to leak sensitive user information\n\nDescription: A timing side channel issue was addressed by using constant time computation.\n\nCVE-2016-7056: Cesar Pereida Garc\u00eda and Billy Brumley (Tampere University of Technology)\n\n**Printing**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Clicking a malicious IPP(S) link may lead to arbitrary code execution\n\nDescription: An uncontrolled format string issue was addressed through improved input validation.\n\nCVE-2017-2403: beist of GrayHash\n\n**python**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing maliciously crafted zip archives with Python may lead to arbitrary code execution\n\nDescription: A memory corruption issue existed in the handling of zip archives. This issue was addressed through improved input validation.\n\nCVE-2016-5636\n\n**QuickTime**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Viewing a maliciously crafted media file may lead to an unexpected application termination or arbitrary code execution\n\nDescription: A memory corruption issue existed in QuickTime. This issue was addressed through improved memory handling.\n\nCVE-2017-2413: Simon Huang(@HuangShaomang) and pjf of IceSword Lab of Qihoo 360\n\n**Security**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Validating empty signatures with SecKeyRawVerify() may unexpectedly succeed\n\nDescription: An validation issue existed with cryptographic API calls. This issue was addressed through improved parameter validation.\n\nCVE-2017-2423: an anonymous researcher\n\n**Security**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with root privileges\n\nDescription: A buffer overflow was addressed through improved bounds checking.\n\nCVE-2017-2451: Alex Radocea of Longterm Security, Inc.\n\n**Security**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted x509 certificate may lead to arbitrary code execution\n\nDescription: A memory corruption issue existed in the parsing of certificates. This issue was addressed through improved input validation.\n\nCVE-2017-2485: Aleksandar Nikolic of Cisco Talos\n\n**SecurityFoundation**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted certificate may lead to arbitrary code execution\n\nDescription: A double free issue was addressed through improved memory management.\n\nCVE-2017-2425: kimyok of Tencent Security Platform Department\n\n**sudo**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A user in an group named \"admin\" on a network directory server may be able to unexpectedly escalate privileges using sudo\n\nDescription: An access issue existed in sudo. This issue was addressed through improved permissions checking.\n\nCVE-2017-2381\n\n**System Integrity Protection**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to modify protected disk locations\n\nDescription: A validation issue existed in the handling of system installation. This issue was addressed through improved handling and validation during the installation process.\n\nCVE-2017-6974: Patrick Wardle of Synack\n\n**tcpdump**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An attacker in a privileged network position may be able to execute arbitrary code with user assistance\n\nDescription: Multiple issues existed in tcpdump before 4.9.0. These were addressed by updating tcpdump to version 4.9.0.\n\nCVE-2016-7922\n\nCVE-2016-7923\n\nCVE-2016-7924\n\nCVE-2016-7925\n\nCVE-2016-7926\n\nCVE-2016-7927\n\nCVE-2016-7928\n\nCVE-2016-7929\n\nCVE-2016-7930\n\nCVE-2016-7931\n\nCVE-2016-7932\n\nCVE-2016-7933\n\nCVE-2016-7934\n\nCVE-2016-7935\n\nCVE-2016-7936\n\nCVE-2016-7937\n\nCVE-2016-7938\n\nCVE-2016-7939\n\nCVE-2016-7940\n\nCVE-2016-7973\n\nCVE-2016-7974\n\nCVE-2016-7975\n\nCVE-2016-7983\n\nCVE-2016-7984\n\nCVE-2016-7985\n\nCVE-2016-7986\n\nCVE-2016-7992\n\nCVE-2016-7993\n\nCVE-2016-8574\n\nCVE-2016-8575\n\nCVE-2017-5202\n\nCVE-2017-5203\n\nCVE-2017-5204\n\nCVE-2017-5205\n\nCVE-2017-5341\n\nCVE-2017-5342\n\nCVE-2017-5482\n\nCVE-2017-5483\n\nCVE-2017-5484\n\nCVE-2017-5485\n\nCVE-2017-5486\n\n**tiffutil**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted image may lead to unexpected application termination\n\nDescription: An out-of-bound read existed in LibTIFF versions before 4.0.7. This was addressed by updating LibTIFF in AKCmds to version 4.0.7.\n\nCVE-2016-3619\n\nCVE-2016-9533\n\nCVE-2016-9535\n\nCVE-2016-9536\n\nCVE-2016-9537\n\nCVE-2016-9538\n\nCVE-2016-9539\n\nCVE-2016-9540\n\nmacOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite includes the security content of [Safari 10.1](<https://support.apple.com/kb/HT207600>).\n\n\n\n## Additional recognition\n\n**XNU**\n\nWe would like to acknowledge Lufeng Li of Qihoo 360 Vulcan Team for their assistance.\n\nInformation about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. [Contact the vendor](<http://support.apple.com/kb/HT2693>) for additional information.\n\nPublished Date: August 29, 2017\n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-03-27T00:00:00", "type": "apple", "title": "About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-0736", "CVE-2016-10009", "CVE-2016-10010", "CVE-2016-10011", "CVE-2016-10012", "CVE-2016-10158", "CVE-2016-10159", "CVE-2016-10160", "CVE-2016-10161", "CVE-2016-2161", "CVE-2016-3619", "CVE-2016-4688", "CVE-2016-5387", "CVE-2016-5636", "CVE-2016-7056", "CVE-2016-7585", "CVE-2016-7922", "CVE-2016-7923", "CVE-2016-7924", "CVE-2016-7925", "CVE-2016-7926", "CVE-2016-7927", "CVE-2016-7928", "CVE-2016-7929", "CVE-2016-7930", "CVE-2016-7931", "CVE-2016-7932", "CVE-2016-7933", "CVE-2016-7934", "CVE-2016-7935", "CVE-2016-7936", "CVE-2016-7937", "CVE-2016-7938", "CVE-2016-7939", "CVE-2016-7940", "CVE-2016-7973", "CVE-2016-7974", "CVE-2016-7975", "CVE-2016-7983", "CVE-2016-7984", "CVE-2016-7985", "CVE-2016-7986", "CVE-2016-7992", "CVE-2016-7993", "CVE-2016-8574", "CVE-2016-8575", "CVE-2016-8740", "CVE-2016-8743", "CVE-2016-9533", "CVE-2016-9535", "CVE-2016-9536", "CVE-2016-9537", "CVE-2016-9538", "CVE-2016-9539", "CVE-2016-9540", "CVE-2016-9586", "CVE-2016-9935", "CVE-2017-2379", "CVE-2017-2381", "CVE-2017-2388", "CVE-2017-2390", "CVE-2017-2398", "CVE-2017-2401", "CVE-2017-2402", "CVE-2017-2403", "CVE-2017-2406", "CVE-2017-2407", "CVE-2017-2408", "CVE-2017-2409", "CVE-2017-2410", "CVE-2017-2413", "CVE-2017-2416", "CVE-2017-2417", "CVE-2017-2418", "CVE-2017-2420", "CVE-2017-2421", "CVE-2017-2422", "CVE-2017-2423", "CVE-2017-2425", "CVE-2017-2426", "CVE-2017-2427", "CVE-2017-2428", "CVE-2017-2429", "CVE-2017-2430", "CVE-2017-2431", "CVE-2017-2432", "CVE-2017-2435", "CVE-2017-2436", "CVE-2017-2437", "CVE-2017-2438", "CVE-2017-2439", "CVE-2017-2440", "CVE-2017-2441", "CVE-2017-2443", "CVE-2017-2448", "CVE-2017-2449", "CVE-2017-2450", "CVE-2017-2451", "CVE-2017-2456", "CVE-2017-2458", "CVE-2017-2461", "CVE-2017-2462", "CVE-2017-2467", "CVE-2017-2472", "CVE-2017-2473", "CVE-2017-2474", "CVE-2017-2477", "CVE-2017-2478", "CVE-2017-2482", "CVE-2017-2483", "CVE-2017-2485", "CVE-2017-2487", "CVE-2017-2489", "CVE-2017-2490", "CVE-2017-5029", "CVE-2017-5202", "CVE-2017-5203", "CVE-2017-5204", "CVE-2017-5205", "CVE-2017-5341", "CVE-2017-5342", "CVE-2017-5482", "CVE-2017-5483", "CVE-2017-5484", "CVE-2017-5485", "CVE-2017-5486", "CVE-2017-6974", "CVE-2017-7070"], "modified": "2017-03-27T00:00:00", "id": "APPLE:E8FF9F04ED54DD8E8D5B899FB4A8000E", "href": "https://support.apple.com/kb/HT207615", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-24T20:42:24", "description": "## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the [Apple security updates](<https://support.apple.com/kb/HT201222>) page.\n\nFor more information about security, see the [Apple Product Security](<https://support.apple.com/kb/HT201220>) page. You can encrypt communications with Apple using the [Apple Product Security PGP Key](<https://support.apple.com/kb/HT201601>).\n\nApple security documents reference vulnerabilities by [CVE-ID](<http://cve.mitre.org/about/>) when possible.\n\n\n\n## macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite\n\nReleased March 27, 2017\n\n**apache**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A remote attacker may be able to cause a denial of service\n\nDescription: Multiple issues existed in Apache before 2.4.25. These were addressed by updating Apache to version 2.4.25.\n\nCVE-2016-0736\n\nCVE-2016-2161\n\nCVE-2016-5387\n\nCVE-2016-8740\n\nCVE-2016-8743\n\nEntry updated March 28, 2017\n\n**apache_mod_php**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Multiple issues existed in PHP before 5.6.30\n\nDescription: Multiple issues existed in PHP before 5.6.30. These were addressed by updating PHP to version 5.6.30.\n\nCVE-2016-10158\n\nCVE-2016-10159\n\nCVE-2016-10160\n\nCVE-2016-10161\n\nCVE-2016-9935\n\n**AppleGraphicsPowerManagement**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed through improved memory handling.\n\nCVE-2017-2421: @cocoahuke\n\n**AppleRAID**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A use after free issue was addressed through improved memory management.\n\nCVE-2017-2438: sss and Axis of 360Nirvanteam\n\n**Audio**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted audio file may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2430: an anonymous researcher working with Trend Micro\u2019s Zero Day Initiative\n\nCVE-2017-2462: an anonymous researcher working with Trend Micro\u2019s Zero Day Initiative\n\n**Bluetooth**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2420: Pekka Oikarainen, Matias Karhumaa and Marko Laakso of Synopsys Software Integrity Group\n\n**Bluetooth**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2427: Axis and sss of Qihoo 360 Nirvan Team\n\n**Bluetooth**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A use after free issue was addressed through improved memory management.\n\nCVE-2017-2449: sss and Axis from 360NirvanTeam\n\n**Carbon**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted .dfont file may lead to arbitrary code execution\n\nDescription: A buffer overflow existed in the handling of font files. This issue was addressed through improved bounds checking.\n\nCVE-2017-2379: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department, John Villamil, Doyensec\n\n**CoreGraphics**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted image may lead to a denial of service\n\nDescription: An infinite recursion was addressed through improved state management.\n\nCVE-2017-2417: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department\n\n**CoreMedia**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted .mov file may lead to arbitrary code execution\n\nDescription: A memory corruption issue existed in the handling of .mov files. This issue was addressed through improved memory management.\n\nCVE-2017-2431: kimyok of Tencent Security Platform Department\n\n**CoreText**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted font file may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2435: John Villamil, Doyensec\n\n**CoreText**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed through improved input validation.\n\nCVE-2017-2450: John Villamil, Doyensec\n\n**CoreText**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted text message may lead to application denial of service\n\nDescription: A resource exhaustion issue was addressed through improved input validation.\n\nCVE-2017-2461: Isaac Archambault of IDAoADI, an anonymous researcher\n\n**curl**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Maliciously crafted user input to libcurl API may allow arbitrary code execution\n\nDescription: A buffer overflow was addressed through improved bounds checking.\n\nCVE-2016-9586: Daniel Stenberg of Mozilla\n\n**EFI**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious Thunderbolt adapter may be able to recover the FileVault 2 encryption password\n\nDescription: An issue existed in the handling of DMA. This issue was addressed by enabling VT-d in EFI.\n\nCVE-2016-7585: Ulf Frisk (@UlfFrisk)\n\n**FinderKit**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Permissions may unexpectedly reset when sending links\n\nDescription: A permission issue existed in the handling of the Send Link feature of iCloud Sharing. This issue was addressed through improved permission controls.\n\nCVE-2017-2429: Raymond Wong DO of Arnot Ogden Medical Center\n\nEntry updated August 23, 2017\n\n**FontParser**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted font file may lead to arbitrary code execution\n\nDescription: Multiple memory corruption issues were addressed through improved input validation.\n\nCVE-2017-2487: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department\n\nCVE-2017-2406: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department\n\n**FontParser**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Parsing a maliciously crafted font file may lead to an unexpected application termination or arbitrary code execution\n\nDescription: Multiple memory corruption issues were addressed through improved input validation.\n\nCVE-2017-2407: riusksk (\u6cc9\u54e5) of Tencent Security Platform Department\n\n**FontParser**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed through improved input validation.\n\nCVE-2017-2439: John Villamil, Doyensec\n\n**FontParser**\n\nAvailable for: OS X El Capitan v10.11.6 and OS X Yosemite v10.10.5\n\nImpact: Processing a maliciously crafted font file may lead to arbitrary code execution \n\nDescription: A buffer overflow existed in the handling of font files. This issue was addressed through improved bounds checking.\n\nCVE-2016-4688: Simon Huang of Alipay company\n\nEntry added April 11, 2017\n\n**HTTPProtocol**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious HTTP/2 server may be able to cause undefined behavior\n\nDescription: Multiple issues existed in nghttp2 before 1.17.0. These were addressed by updating nghttp2 to version 1.17.0.\n\nCVE-2017-2428\n\nEntry updated March 28, 2017\n\n**Hypervisor**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Applications using the Hypervisor framework may unexpectedly leak the CR8 control register between guest and host\n\nDescription: An information leakage issue was addressed through improved state management.\n\nCVE-2017-2418: Alex Fishman and Izik Eidus of Veertu Inc.\n\n**iBooks**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Parsing a maliciously crafted iBooks file may lead to local file disclosure\n\nDescription: An information leak existed in the handling of file URLs. This issue was addressed through improved URL handling.\n\nCVE-2017-2426: Craig Arendt of Stratum Security, Jun Kokatsu (@shhnjk)\n\n**ImageIO**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2416: Qidan He (\u4f55\u6dc7\u4e39, @flanker_hqd) of KeenLab, Tencent\n\n**ImageIO**\n\nAvailable for: macOS Sierra 10.12.3, OS X El Capitan v10.11.6, and OS X Yosemite v10.10.5\n\nImpact: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2432: an anonymous researcher working with Trend Micro's Zero Day Initiative\n\n**ImageIO**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted file may lead to an unexpected application termination or arbitrary code execution\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2467\n\n**ImageIO**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted image may lead to unexpected application termination\n\nDescription: An out-of-bound read existed in LibTIFF versions before 4.0.7. This was addressed by updating LibTIFF in ImageIO to version 4.0.7.\n\nCVE-2016-3619\n\n**Intel Graphics Driver**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges \n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2443: Ian Beer of Google Project Zero\n\n**Intel Graphics Driver**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to disclose kernel memory\n\nDescription: A validation issue was addressed through improved input sanitization.\n\nCVE-2017-2489: Ian Beer of Google Project Zero\n\nEntry added March 31, 2017\n\n**IOATAFamily**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2408: Yangkang (@dnpushme) of Qihoo360 Qex Team\n\n**IOFireWireAVC**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2436: Orr A, IBM Security\n\n**IOFireWireAVC**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A local attacker may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2437: Benjamin Gnahm (@mitp0sh) of Blue Frost Security\n\n**IOFireWireFamily**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to cause a denial of service\n\nDescription: A null pointer dereference was addressed through improved input validation.\n\nCVE-2017-2388: Brandon Azad, an anonymous researcher\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2398: Lufeng Li of Qihoo 360 Vulcan Team\n\nCVE-2017-2401: Lufeng Li of Qihoo 360 Vulcan Team\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: An input validation issue existed in the kernel. This issue was addressed through improved input validation.\n\nCVE-2017-2410: Apple\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: An integer overflow was addressed through improved input validation.\n\nCVE-2017-2440: an anonymous researcher\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with root privileges\n\nDescription: A race condition was addressed through improved memory handling.\n\nCVE-2017-2456: lokihardt of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A use after free issue was addressed through improved memory management.\n\nCVE-2017-2472: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with kernel privileges\n\nDescription: A memory corruption issue was addressed through improved input validation.\n\nCVE-2017-2473: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: An off-by-one issue was addressed through improved bounds checking.\n\nCVE-2017-2474: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed through improved locking.\n\nCVE-2017-2478: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow issue was addressed through improved memory handling.\n\nCVE-2017-2482: Ian Beer of Google Project Zero\n\nCVE-2017-2483: Ian Beer of Google Project Zero\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with elevated privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2490: Ian Beer of Google Project Zero, The UK's National Cyber Security Centre (NCSC)\n\nEntry added March 31, 2017\n\n**Kernel**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: The screen may unexpectedly remain unlocked when the lid is closed\n\nDescription: An insufficient locking issue was addressed with improved state management.\n\nCVE-2017-7070: Ed McKenzie\n\nEntry added August 10, 2017\n\n**Keyboards**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code\n\nDescription: A buffer overflow was addressed through improved bounds checking.\n\nCVE-2017-2458: Shashank (@cyberboyIndia)\n\n**Keychain**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An attacker who is able to intercept TLS connections may be able to read secrets protected by iCloud Keychain.\n\nDescription: In certain circumstances, iCloud Keychain failed to validate the authenticity of OTR packets. This issue was addressed through improved validation.\n\nCVE-2017-2448: Alex Radocea of Longterm Security, Inc.\n\nEntry updated March 30, 2017\n\n**libarchive**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A local attacker may be able to change file system permissions on arbitrary directories\n\nDescription: A validation issue existed in the handling of symlinks. This issue was addressed through improved validation of symlinks.\n\nCVE-2017-2390: Omer Medan of enSilo Ltd\n\n**libc++abi**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Demangling a malicious C++ application may lead to arbitrary code execution\n\nDescription: A use after free issue was addressed through improved memory management.\n\nCVE-2017-2441\n\n**LibreSSL**\n\nAvailable for: macOS Sierra 10.12.3 and OS X El Capitan v10.11.6\n\nImpact: A local user may be able to leak sensitive user information\n\nDescription: A timing side channel allowed an attacker to recover keys. This issue was addressed by introducing constant time computation.\n\nCVE-2016-7056: Cesar Pereida Garc\u00eda and Billy Brumley (Tampere University of Technology)\n\n**libxslt**\n\nAvailable for: OS X El Capitan v10.11.6\n\nImpact: Multiple vulnerabilities in libxslt\n\nDescription: Multiple memory corruption issues were addressed through improved memory handling.\n\nCVE-2017-2477\n\nEntry added March 30, 2017\n\n**libxslt**\n\nAvailable for: macOS Sierra 10.12.3, OS X El Capitan v10.11.6, and Yosemite v10.10.5\n\nImpact: Multiple vulnerabilities in libxslt\n\nDescription: Multiple memory corruption issues were addressed through improved memory handling.\n\nCVE-2017-5029: Holger Fuhrmannek\n\nEntry added March 28, 2017\n\n**MCX Client**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Removing a configuration profile with multiple payloads may not remove Active Directory certificate trust\n\nDescription: An issue existed in profile uninstallation. This issue was addressed through improved cleanup.\n\nCVE-2017-2402: an anonymous researcher\n\n**Menus**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to disclose process memory\n\nDescription: An out-of-bounds read was addressed through improved input validation.\n\nCVE-2017-2409: Sergey Bylokhov\n\n**Multi-Touch**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to execute arbitrary code with system privileges\n\nDescription: A memory corruption issue was addressed through improved memory handling.\n\nCVE-2017-2422: @cocoahuke\n\n**OpenSSH**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Multiple issues in OpenSSH\n\nDescription: Multiple issues existed in OpenSSH before version 7.4. These were addressed by updating OpenSSH to version 7.4.\n\nCVE-2016-10009\n\nCVE-2016-10010\n\nCVE-2016-10011\n\nCVE-2016-10012\n\n**OpenSSL**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A local user may be able to leak sensitive user information\n\nDescription: A timing side channel issue was addressed by using constant time computation.\n\nCVE-2016-7056: Cesar Pereida Garc\u00eda and Billy Brumley (Tampere University of Technology)\n\n**Printing**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Clicking a malicious IPP(S) link may lead to arbitrary code execution\n\nDescription: An uncontrolled format string issue was addressed through improved input validation.\n\nCVE-2017-2403: beist of GrayHash\n\n**python**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing maliciously crafted zip archives with Python may lead to arbitrary code execution\n\nDescription: A memory corruption issue existed in the handling of zip archives. This issue was addressed through improved input validation.\n\nCVE-2016-5636\n\n**QuickTime**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Viewing a maliciously crafted media file may lead to an unexpected application termination or arbitrary code execution\n\nDescription: A memory corruption issue existed in QuickTime. This issue was addressed through improved memory handling.\n\nCVE-2017-2413: Simon Huang(@HuangShaomang) and pjf of IceSword Lab of Qihoo 360\n\n**Security**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Validating empty signatures with SecKeyRawVerify() may unexpectedly succeed\n\nDescription: An validation issue existed with cryptographic API calls. This issue was addressed through improved parameter validation.\n\nCVE-2017-2423: an anonymous researcher\n\n**Security**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An application may be able to execute arbitrary code with root privileges\n\nDescription: A buffer overflow was addressed through improved bounds checking.\n\nCVE-2017-2451: Alex Radocea of Longterm Security, Inc.\n\n**Security**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted x509 certificate may lead to arbitrary code execution\n\nDescription: A memory corruption issue existed in the parsing of certificates. This issue was addressed through improved input validation.\n\nCVE-2017-2485: Aleksandar Nikolic of Cisco Talos\n\n**SecurityFoundation**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted certificate may lead to arbitrary code execution\n\nDescription: A double free issue was addressed through improved memory management.\n\nCVE-2017-2425: kimyok of Tencent Security Platform Department\n\n**sudo**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A user in an group named \"admin\" on a network directory server may be able to unexpectedly escalate privileges using sudo\n\nDescription: An access issue existed in sudo. This issue was addressed through improved permissions checking.\n\nCVE-2017-2381\n\n**System Integrity Protection**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: A malicious application may be able to modify protected disk locations\n\nDescription: A validation issue existed in the handling of system installation. This issue was addressed through improved handling and validation during the installation process.\n\nCVE-2017-6974: Patrick Wardle of Synack\n\n**tcpdump**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: An attacker in a privileged network position may be able to execute arbitrary code with user assistance\n\nDescription: Multiple issues existed in tcpdump before 4.9.0. These were addressed by updating tcpdump to version 4.9.0.\n\nCVE-2016-7922\n\nCVE-2016-7923\n\nCVE-2016-7924\n\nCVE-2016-7925\n\nCVE-2016-7926\n\nCVE-2016-7927\n\nCVE-2016-7928\n\nCVE-2016-7929\n\nCVE-2016-7930\n\nCVE-2016-7931\n\nCVE-2016-7932\n\nCVE-2016-7933\n\nCVE-2016-7934\n\nCVE-2016-7935\n\nCVE-2016-7936\n\nCVE-2016-7937\n\nCVE-2016-7938\n\nCVE-2016-7939\n\nCVE-2016-7940\n\nCVE-2016-7973\n\nCVE-2016-7974\n\nCVE-2016-7975\n\nCVE-2016-7983\n\nCVE-2016-7984\n\nCVE-2016-7985\n\nCVE-2016-7986\n\nCVE-2016-7992\n\nCVE-2016-7993\n\nCVE-2016-8574\n\nCVE-2016-8575\n\nCVE-2017-5202\n\nCVE-2017-5203\n\nCVE-2017-5204\n\nCVE-2017-5205\n\nCVE-2017-5341\n\nCVE-2017-5342\n\nCVE-2017-5482\n\nCVE-2017-5483\n\nCVE-2017-5484\n\nCVE-2017-5485\n\nCVE-2017-5486\n\n**tiffutil**\n\nAvailable for: macOS Sierra 10.12.3\n\nImpact: Processing a maliciously crafted image may lead to unexpected application termination\n\nDescription: An out-of-bound read existed in LibTIFF versions before 4.0.7. This was addressed by updating LibTIFF in AKCmds to version 4.0.7.\n\nCVE-2016-3619\n\nCVE-2016-9533\n\nCVE-2016-9535\n\nCVE-2016-9536\n\nCVE-2016-9537\n\nCVE-2016-9538\n\nCVE-2016-9539\n\nCVE-2016-9540\n\nmacOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite includes the security content of [Safari 10.1](<https://support.apple.com/kb/HT207600>).\n\n\n\n## Additional recognition\n\n**XNU**\n\nWe would like to acknowledge Lufeng Li of Qihoo 360 Vulcan Team for their assistance.\n", "edition": 3, "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-08-29T02:52:03", "title": "About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite - Apple Support", "type": "apple", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-2423", "CVE-2017-2430", "CVE-2016-7056", "CVE-2016-7936", "CVE-2016-7983", "CVE-2016-9536", "CVE-2016-2161", "CVE-2016-7930", "CVE-2017-2461", "CVE-2017-5341", "CVE-2016-10011", "CVE-2017-2450", "CVE-2016-7931", "CVE-2016-7985", "CVE-2016-3619", "CVE-2016-7922", "CVE-2016-10009", "CVE-2016-9540", "CVE-2016-9935", "CVE-2017-2441", "CVE-2017-5484", "CVE-2017-5203", "CVE-2016-8743", "CVE-2017-2431", "CVE-2017-2435", "CVE-2017-2422", "CVE-2016-10010", "CVE-2017-2439", "CVE-2017-2402", "CVE-2016-7928", "CVE-2017-5342", "CVE-2017-2420", "CVE-2017-2379", "CVE-2017-2428", "CVE-2016-7993", "CVE-2017-2437", "CVE-2017-2483", "CVE-2016-7986", "CVE-2017-2456", "CVE-2017-2485", "CVE-2017-2443", "CVE-2017-2418", "CVE-2017-2381", "CVE-2017-2489", "CVE-2016-9539", "CVE-2016-7935", "CVE-2017-2451", "CVE-2017-5205", "CVE-2017-2406", "CVE-2016-7934", "CVE-2016-4688", "CVE-2016-9535", "CVE-2017-5486", "CVE-2017-2474", "CVE-2016-5636", "CVE-2017-2472", "CVE-2017-2390", "CVE-2017-2417", "CVE-2016-7975", "CVE-2016-7937", "CVE-2016-8575", "CVE-2016-7585", "CVE-2017-2388", "CVE-2017-7070", "CVE-2016-9537", "CVE-2016-8574", "CVE-2016-9538", "CVE-2017-2462", "CVE-2017-2487", "CVE-2016-10160", "CVE-2017-5204", "CVE-2016-7926", "CVE-2016-7939", "CVE-2016-7924", "CVE-2017-2449", "CVE-2017-6974", "CVE-2017-2421", "CVE-2017-2427", "CVE-2016-7974", "CVE-2017-5029", "CVE-2017-2410", "CVE-2017-2482", "CVE-2017-2477", "CVE-2016-10159", "CVE-2017-2458", "CVE-2016-7992", "CVE-2017-2448", "CVE-2016-10012", "CVE-2017-2401", "CVE-2017-2409", "CVE-2016-7932", "CVE-2016-8740", "CVE-2017-2413", "CVE-2017-2408", "CVE-2017-5202", "CVE-2017-2467", "CVE-2016-5387", "CVE-2016-7938", "CVE-2016-7984", "CVE-2017-2490", "CVE-2017-5483", "CVE-2016-9586", "CVE-2017-2407", "CVE-2017-2438", "CVE-2016-7973", "CVE-2017-2426", "CVE-2017-2436", "CVE-2017-2473", "CVE-2016-10161", "CVE-2017-2403", "CVE-2017-2416", "CVE-2017-5482", "CVE-2016-7929", "CVE-2016-7940", "CVE-2016-7923", "CVE-2016-7925", "CVE-2016-9533", "CVE-2017-2398", "CVE-2017-2440", "CVE-2016-10158", "CVE-2016-7927", "CVE-2016-0736", "CVE-2017-5485", "CVE-2017-2425", "CVE-2017-2429", "CVE-2017-2432", "CVE-2016-7933", "CVE-2017-2478"], "modified": "2017-08-29T02:52:03", "id": "APPLE:HT207615", "href": "https://support.apple.com/kb/HT207615", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}]}
CVE-2016-7931
