K04367730: FRF.16 parser vulnerability CVE-2018-14468

Security Advisory Description The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfrprint. CVE-2018-14468 Impact When tcpdump is active and configured to parse FRF.16 traffic, certain traffic patterns may trigger a crash or other unexpected behavior of the tcpdump...

Buffer Over-reads

tcpdump is vulnerable to a buffer over-read. The vulnerability exists due to a flaw in print-fr.c:mfrprint...

Design/Logic Flaw

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfrprint...

CVE-2018-14468

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfrprint...

UBUNTU-CVE-2018-14468

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfrprint...

CVE-2016-8575

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2017-5482...

Buffer overflow

The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15print...

CVE-2016-8574

The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15print...

CVE-2016-8574

tcpdump CVE-2016-8574 affects the FRF.15 parser and is a buffer overflow in print-fr.c:frf15_print() that could allow remote code execution or crash. The vulnerability is addressed upstream by upgrading to tcpdump 4.9.0 (related advisories confirm fixes for 4.9.0 and later). The initial descripti...

CVE-2017-5482

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2016-8575...

CVE-2016-8574

The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15print...

CVE-2016-8575

tcpdump contains a buffer overflow in the Q.933 parser (print-fr.c:q933_print) prior to version 4.9.0. An attacker could trigger this remotely by sending a crafted argument, potentially executing arbitrary code or causing a crash. The vulnerability is tracked as CVE-2016-8575 (and is part of a br...

CVE-2016-8574

The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15print...

CVE-2017-5482

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2016-8575...