Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-809-1:1DE9C
HistoryJan 30, 2017 - 10:07 p.m.

[SECURITY] [DLA 809-1] tcpdump security update

2017-01-3022:07:17
lists.debian.org
9

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.1%

JSON

Package : tcpdump
Version : 4.9.0-1~deb7u1
CVE ID : CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925
CVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7929
CVE-2016-7930 CVE-2016-7931 CVE-2016-7932 CVE-2016-7933
CVE-2016-7934 CVE-2016-7935 CVE-2016-7936 CVE-2016-7937
CVE-2016-7938 CVE-2016-7939 CVE-2016-7940 CVE-2016-7973
CVE-2016-7974 CVE-2016-7975 CVE-2016-7983 CVE-2016-7984
CVE-2016-7985 CVE-2016-7986 CVE-2016-7992 CVE-2016-7993
CVE-2016-8574 CVE-2016-8575 CVE-2017-5202 CVE-2017-5203
CVE-2017-5204 CVE-2017-5205 CVE-2017-5341 CVE-2017-5342
CVE-2017-5482 CVE-2017-5483 CVE-2017-5484 CVE-2017-5485
CVE-2017-5486

Multiple vulnerabilities have been discovered in tcpdump, a command-line
network traffic analyzer. These vulnerabilities might result in denial of
service or the execution of arbitrary code.

CVE-2016-7922

Buffer overflow in parser.

CVE-2016-7923

Buffer overflow in parser.

CVE-2016-7924

Buffer overflow in parser.

CVE-2016-7925

Buffer overflow in parser.

CVE-2016-7926

Buffer overflow in parser.

CVE-2016-7927

Buffer overflow in parser.

CVE-2016-7928

Buffer overflow in parser.

CVE-2016-7929

Buffer overflow in parser.

CVE-2016-7930

Buffer overflow in parser.

CVE-2016-7931

Buffer overflow in parser.

CVE-2016-7932

Buffer overflow in parser.

CVE-2016-7933

Buffer overflow in parser.

CVE-2016-7934

Buffer overflow in parser.

CVE-2016-7935

Buffer overflow in parser.

CVE-2016-7936

Buffer overflow in parser.

CVE-2016-7937

Buffer overflow in parser.

CVE-2016-7938

Buffer overflow in parser.

CVE-2016-7939

Buffer overflow in parser.

CVE-2016-7940

Buffer overflow in parser.

CVE-2016-7973

Buffer overflow in parser.

CVE-2016-7974

Buffer overflow in parser.

CVE-2016-7975

Buffer overflow in parser.

CVE-2016-7983

Buffer overflow in parser.

CVE-2016-7984

Buffer overflow in parser.

CVE-2016-7985

Buffer overflow in parser.

CVE-2016-7986

Buffer overflow in parser.

CVE-2016-7992

Buffer overflow in parser.

CVE-2016-7993

Buffer overflow in parser.

CVE-2016-8574

Buffer overflow in parser.

CVE-2016-8575

Buffer overflow in parser.

CVE-2017-5202

Buffer overflow in parser.

CVE-2017-5203

Buffer overflow in parser.

CVE-2017-5204

Buffer overflow in parser.

CVE-2017-5205

Buffer overflow in parser.

CVE-2017-5341

Buffer overflow in parser.

CVE-2017-5342

Buffer overflow in parser.

CVE-2017-5482

Buffer overflow in parser.

CVE-2017-5483

Buffer overflow in parser.

CVE-2017-5484

Buffer overflow in parser.

CVE-2017-5485

Buffer overflow in parser.

CVE-2017-5486

Buffer overflow in parser.

For Debian 7 "Wheezy", these problems have been fixed in version
4.9.0-1~deb7u1.

We recommend that you upgrade your tcpdump packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-------------- Ola Lundqvist --------------------
/ [email protected] GPG fingerprint
| [email protected] 22F2 32C6 B1E0 F4BF 2B26 |

http://inguza.com/ 0A6A 5E90 DCFA 9426 876F /

Related

osv 20
nessus 27
openvas 13
slackware 1
archlinux 1
ubuntu 1
gentoo 1
fedora 1
debian 1
cloudfoundry 1
mageia 1
aix 1
redhat 1
centos 1
ibm 4
oraclelinux 1
f5 9
ubuntucve 22
debiancve 15
alpinelinux 16
cve 21
prion 20
hackerone 1
apple 2
redhatcve 17
osv
osv
tcpdump - security update
2017-01-30 00:00:00
tcpdump - security update
2017-01-29 00:00:00
CVE-2017-5482
2017-01-28 01:59:01
nessus
nessus
Fedora 25 : 14:tcpdump (2017-7ecbc90157)
2017-02-15 00:00:00
Photon OS 1.0: Tcpdump PHSA-2017-0004
2019-02-07 00:00:00
GLSA-201702-30 : tcpdump: Multiple vulnerabilities
2017-02-21 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3205-1)
2017-02-22 00:00:00
Slackware: Security Advisory (SSA:2017-041-04)
2022-04-21 00:00:00
Debian Security Advisory DSA 3775-1 (tcpdump - security update)
2017-01-29 00:00:00
slackware
slackware
[slackware-security] tcpdump
2017-02-10 21:09:44
archlinux
archlinux
[ASA-201702-1] tcpdump: arbitrary code execution
2017-02-02 00:00:00
ubuntu
ubuntu
tcpdump vulnerabilities
2017-02-21 00:00:00
gentoo
gentoo
tcpdump: Multiple vulnerabilities
2017-02-21 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: tcpdump-4.9.0-1.fc25
2017-02-14 15:52:15
debian
debian
[SECURITY] [DSA 3775-1] tcpdump security update
2017-01-29 17:24:15
cloudfoundry
cloudfoundry
USN-3205-1: tcpdump vulnerabilities | Cloud Foundry
2017-03-14 00:00:00
mageia
mageia
Updated libpcap/tcpdump packages fix security vulnerability
2017-02-23 17:58:52
aix
aix
There are multiple vulnerabilities in tcpdump that impact AIX.
2017-05-25 11:23:13
redhat
redhat
(RHSA-2017:1871) Moderate: tcpdump security, bug fix, and enhancement update
2017-08-01 03:03:57
centos
centos
tcpdump security update
2017-08-24 01:41:48
ibm
ibm
Security Bulletin: Vulnerabilities in tcpdump affect IBM Flex System Chassis Management Module (CMM)
2019-01-31 02:25:02
Security Bulletin: Vulnerabilities in tcpdump affect PowerKVM
2018-06-18 01:38:06
Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in tcpdump
2018-06-16 22:02:20
oraclelinux
oraclelinux
tcpdump security, bug fix, and enhancement update
2017-08-07 00:00:00
f5
f5
K94778122 : tcpdump vulnerabilities CVE-2016-7985, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, and CVE-2016-8575
2017-03-07 00:00:00
K49144112 : tcpdump vulnerabilities CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, and CVE-2016-7939
2017-03-07 00:00:00
K39512927 : tcpdump vulnerabilities CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, and CVE-2016-7933
2017-03-07 00:00:00
ubuntucve
ubuntucve
CVE-2016-8575
2017-01-27 00:00:00
CVE-2017-5482
2017-01-27 00:00:00
CVE-2016-7983
2017-01-27 00:00:00
debiancve
debiancve
CVE-2016-8575
2017-01-28 01:59:00
CVE-2017-5482
2017-01-28 01:59:00
CVE-2016-7983
2017-01-28 01:59:00
alpinelinux
alpinelinux
CVE-2016-8575
2017-01-28 01:59:00
CVE-2017-5482
2017-01-28 01:59:00
CVE-2016-7993
2017-01-28 01:59:00
cve
cve
CVE-2017-5482
2017-01-28 01:59:00
CVE-2016-8575
2017-01-28 01:59:00
CVE-2016-7992
2017-01-28 01:59:00
prion
prion
Buffer overflow
2017-01-28 01:59:00
Buffer overflow
2017-01-28 01:59:00
Buffer overflow
2017-01-28 01:59:00
hackerone
hackerone
Internet Bug Bounty: CVE-2017-5482 The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print().
2017-02-02 17:26:49
apple
apple
About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite
2017-03-27 00:00:00
About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite - Apple Support
2017-08-29 02:52:03
redhatcve
redhatcve
CVE-2016-7993
2017-02-03 15:50:01
CVE-2016-7936
2017-02-03 15:52:39
CVE-2016-7985
2017-02-03 15:51:42

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.1%

JSON
Related for DEBIAN:DLA-809-1:1DE9C
osv20nessus27openvas13slackware1archlinux1ubuntu1gentoo1fedora1debian1cloudfoundry1mageia1aix1redhat1centos1ibm4oraclelinux1f59ubuntucve22debiancve15alpinelinux16cve21prion20hackerone1apple2redhatcve17