SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2020:3358-1)

This update for tcpdump fixes the following issues : CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size bsc1178466. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

USN-4660-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that a race condition existed in the perf subsystem of the Linux kernel, leading to a use-after-free vulnerability. An attacker with access to the perf subsystem could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-14351 It was...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4660-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4660-1 advisory. It was discovered that a race condition existed in the perf subsystem of the Linux kernel, leading to a use-after-free vulnerability. An...

USN-4657-1: Linux kernel vulnerabilities

Elena Petrova discovered that the pin controller device tree implementation in the Linux kernel did not properly handle string references. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-0427 Daniele Antonioli, Nils Ole Tippenhauer, and Kasper Rasmussen...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4658-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4658-1 advisory. It was discovered that a race condition existed in the binder IPC implementation in the Linux kernel, leading to a use-after-free...

Ubuntu: Security Advisory (USN-4658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2020-2505)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the ppp decapsulator can cause a large amount of memory to be allocated...

openSUSE Security Update : tcpdump (openSUSE-2020-1986)

This update for tcpdump fixes the following issues : - CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size bsc1178466. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package...

Updated tcpdump package fixes a security vulnerability

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. CVE-2020-8037...

OPENSUSE-SU-2020:1986-1 Security update for tcpdump

This update for tcpdump fixes the following issues: - CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size bsc1178466. This update was imported from the SUSE:SLE-15:Update update project...

Security update for tcpdump (moderate)

openSUSE Security Update: Security update for tcpdump Announcement ID: openSUSE-SU-2020:1983-1 Rating: moderate References: 1178466 Cross-References: CVE-2020-8037 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for tcpdump...

Security update for tcpdump (moderate)

openSUSE Security Update: Security update for tcpdump Announcement ID: openSUSE-SU-2020:1986-1 Rating: moderate References: 1178466 Cross-References: CVE-2020-8037 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for tcpdump...

SUSE-SU-2020:3360-1 Security update for tcpdump

This update for tcpdump fixes the following issues: - CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size bsc1178466. The previous update of tcpdump already fixed variuous Buffer overflow/overread vulnerabilities bsc1153098, bsc1153332 - CVE-2017-16808 AoE ...

Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...

CVE-2020-8037

A flaw was found in tcpdump while printing PPP packets captured in a pcap file or coming from the network. This flaw allows a remote attacker to send specially crafted packets that, when printed, can lead the application to allocate a large amount of memory, resulting in a denial of service. The...

AZL-6905 CVE-2020-8037 affecting package tcpdump for versions less than 4.9.3-3

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...

ALPINE-CVE-2020-8037

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...

CVE-2020-8037

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...

CVE-2020-8037

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...