Lucene search

K
hackeroneGeeknikH1:202969
HistoryFeb 02, 2017 - 5:26 p.m.

Internet Bug Bounty: CVE-2017-5482 The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print().

2017-02-0217:26:49
geeknik
hackerone.com
27

EPSS

0.015

Percentile

87.1%

Reported to the project maintainers in 2016. Regardless of CVE-2016-8575 q933_print()
still could overread the buffer trying to parse a short packet. Fixed by https://github.com/the-tcpdump-group/tcpdump/commit/c39c1d99ac3b6d5d9519b39da6717180651650d3.