CVE-2024-2397 infinite loop in the PPP printer of tcpdump

Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLTPPPSERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21...

PT-2024-20208 · Tcpdump · Tcpdump

Name of the Vulnerable Software and Affected Versions: tcpdump versions from 2023-06-05 to 2024-03-21 git master branch Description: The PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT PPP SERIAL .pcap savefile due to a bug in packet data buffers management...

tcpdump 安全漏洞

tcpdump is a set of sniffing tools from the Tcpdump team that run under the command line. The tool is mainly used for packet analysis and network traffic capture, among others. A security vulnerability exists in tcpdump, which stems from incorrect management of packet data buffers...

Moderate Photon OS Security Update - PHSA-2024-5.0-0237

Updates of 'tcpdump', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-5.0-91-0237

Updates of 'linux-esx', 'tcpdump', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-4.0-0587

Updates of 'tcpdump' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-3.0-0744

Updates of 'tcpdump', 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

tcpdump security update

An update is available for tcpdump. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tcpdump packages contain the tcpdump utility for monitoring network...

RLSA-2024:0769 Moderate: tcpdump security update

The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces. Security Fixes: tcpslice: use-after-free in extractslice CVE-2021-41043 For more details about th...

Rocky Linux 8 : tcpdump (RLSA-2024:0769)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:0769 advisory. - Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. CVE-2021-41043 Note that Nessus has not tested for this issue but has instead...

Moderate: Red Hat Security Advisory: tcpdump security update

An update for tcpdump is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 9 : tcpdump (RHSA-2024:1090)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1090 advisory. The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a...

Oracle Linux 8 : tcpdump (ELSA-2024-0769)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-0769 advisory. 14:4.9.3-3.1 - tcpslice: use-after-free in extractslice CVE-2021-41043 Tenable has extracted the preceding description block directly from the Oracle Linux...

tcpdump security update

14:4.9.3-3.1 - tcpslice: use-after-free in extractslice CVE-2021-41043...

CVE-2024-0166

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svctcpdump utility. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands with elevated privileges...

Moderate: Red Hat Security Advisory: tcpdump security update

An update for tcpdump is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: tcpdump security update

The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces. Security Fixes: tcpslice: use-after-free in extractslice CVE-2021-41043 For more details about th...

RHEL 8 : tcpdump (RHSA-2024:0769)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:0769 advisory. The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a...

ALSA-2024:0769 Moderate: tcpdump security update

The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces. Security Fixes: tcpslice: use-after-free in extractslice CVE-2021-41043 For more details about th...

PT-2024-3210 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions prior to 5.4 Description: The issue is an OS Command Injection Vulnerability in the svc tcpdump utility of Dell Unity. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of...