5 matches found
Rocky Linux 8 [CIQ] Security Update: tcpdump / tcpdump-debuginfo / tcpdump-debugsource Multiple Vulnerabilities (crlsa-2020_4760)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204760 advisory. tcpdump: SMB data printing mishandled CVE-2018-10103 tcpdump: SMB data printing mishandled CVE-2018-10105 tcpdump: Out of bounds read/write in getnextfile ...
The vulnerability of the `get_next_file` function in the UNIX utility `tcpdump` involves a lack of mechanism for checking the size of input data. This leads to the output data exceeding the buffer’s capacity, allowing attackers to access protected information, cause service failures, or compromise the availability of information.
The vulnerability of the getnextfile function in the UNIX utility tcpdump is related to a lack of mechanism for checking the size of input data, resulting in the output operation being within the allowable buffer size. Exploiting this vulnerability can allow an attacker to gain access to protecte...
CVE-2018-14879
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:getnextfile...
