Security update for tcpdump (important)

openSUSE Security Update: Security update for tcpdump Announcement ID: openSUSE-SU-2019:2344-1 Rating: important References: 1068716 1153098 1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465...

CVE-2018-14464

An out-of-bounds read vulnerability was discovered in tcpdump while printing LMP packets captured in a pcap file or coming from the network. A remote attacker may abuse this flaw by sending specially crafted packets that, when printed, would trigger the flaw and crash the application...

ALPINE-CVE-2019-15166

lmpprintdatalinksubobjs in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks...

CVE-2018-14464

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...

CVE-2018-14464

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...

Buffer overflow

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...

CVE-2019-15166 lmp_print in tcpdump lacks certain boundary checks

lmpprintdatalinksubobjs in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks...

CVE-2018-14464

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...

CVE-2018-14464

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...

CVE-2018-14464

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...

PT-2019-5678

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a lack of certain bounds checks in the lmp print data link subobjs function in print-lmp.c of the tcpdump utility. This can lead to a buffer over-read, potentially allowing a...

CVE-2018-14464

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...

Command injection

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command...

CVE-2018-19860

CVE-2018-19860 affects Broadcom Bluetooth firmware (Nexus 5 BCM4335C0; Raspberry Pi 3 BCM43438A1; other Broadcom-based devices) prior to summer 2014. The issue is an improper restriction of LMP commands, allowing an LMP command to cause execution of memory contents, effectively enabling memory co...

tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

DEBIAN-CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

Buffer overflow

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

CVE-2017-13003

CVE-2017-13003 affects tcpdump prior to 4.9.2, where the LMP parser’s lmp_print() could read memory beyond bounds (buffer over-read). This vulnerability may enable an attacker to obtain sensitive information or crash the application when parsing LMP data. The issue is resolved by upgrading to tcp...