Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5331-2
HistoryApr 11, 2022 - 12:00 a.m.

tcpdump vulnerabilities

2022-04-1100:00:00
ubuntu.com
65

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.9%

JSON

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • tcpdump - command-line network traffic analyzer

Details

USN-5331-1 fixed several vulnerabilities in tcpdump. This update provides
the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

Original advisory details:
It was discovered that tcpdump incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service,
or possibly execute arbitrary code. (CVE-2018-16301)

It was discovered that tcpdump incorrectly handled certain captured data.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2020-8037)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchtcpdump< 4.9.3-4ubuntu0.1UNKNOWN
Ubuntu20.04noarchtcpdump-dbgsym< 4.9.3-4ubuntu0.1UNKNOWN
Ubuntu18.04noarchtcpdump< 4.9.3-0ubuntu0.18.04.2UNKNOWN
Ubuntu18.04noarchtcpdump-dbgsym< 4.9.3-0ubuntu0.18.04.2UNKNOWN

Related

openvas 44
nessus 54
osv 7
cloudfoundry 2
ubuntu 1
suse 7
cbl_mariner 4
debiancve 2
f5 1
veracode 2
cve 2
prion 2
ubuntucve 2
redhatcve 2
alpinelinux 2
mageia 2
redhat 2
debian 1
photon 14
fedora 8
oraclelinux 1
almalinux 1
rocky 1
slackware 1
apple 5
openvas
openvas
Ubuntu: Security Advisory (USN-5331-2)
2022-04-12 00:00:00
Ubuntu: Security Advisory (USN-5331-1)
2022-08-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0505-1)
2022-02-19 00:00:00
nessus
nessus
Ubuntu 16.04 ESM : tcpdump vulnerabilities (USN-5331-1)
2022-03-16 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : tcpdump vulnerabilities (USN-5331-2)
2022-04-11 00:00:00
F5 Networks BIG-IP : libpcap vulnerability (K86252029)
2020-07-09 00:00:00
osv
osv
tcpdump vulnerabilities
2022-04-11 07:44:40
tcpdump vulnerabilities
2022-03-16 12:53:13
CVE-2018-16301
2019-10-03 16:15:12
cloudfoundry
cloudfoundry
USN-5331-1: tcpdump vulnerabilities | Cloud Foundry
2022-04-21 00:00:00
USN-5331-2: tcpdump vulnerabilities | Cloud Foundry
2022-05-26 00:00:00
ubuntu
ubuntu
tcpdump vulnerabilities
2022-03-16 00:00:00
suse
suse
Security update for tcpdump (moderate)
2022-03-09 00:00:00
Security update for tcpdump (moderate)
2020-11-21 00:00:00
Security update for tcpdump (moderate)
2020-11-21 00:00:00
cbl_mariner
cbl_mariner
CVE-2018-16301 affecting package tcpdump 4.9.3-3
2022-04-09 06:51:52
CVE-2020-8037 affecting package tcpdump 4.9.3-3
2020-11-30 19:30:40
CVE-2018-16301 affecting package tcpdump 4.9.3-3
2022-03-09 18:31:42
debiancve
debiancve
CVE-2018-16301
2019-10-03 16:15:00
CVE-2020-8037
2020-11-04 18:15:00
f5
f5
K86252029 : libpcap vulnerability CVE-2018-16301
2019-11-06 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-10-04 11:13:34
Denial Of Service (DoS)
2020-11-24 09:51:28
cve
cve
CVE-2018-16301
2019-10-03 16:15:00
CVE-2020-8037
2020-11-04 18:15:00
prion
prion
Buffer overflow
2019-10-03 16:15:00
Memory corruption
2020-11-04 18:15:00
ubuntucve
ubuntucve
CVE-2018-16301
2019-09-30 00:00:00
CVE-2020-8037
2020-11-04 00:00:00
redhatcve
redhatcve
CVE-2018-16301
2019-10-10 18:21:43
CVE-2020-8037
2020-11-05 17:31:20
alpinelinux
alpinelinux
CVE-2018-16301
2019-10-03 16:15:00
CVE-2020-8037
2020-11-04 18:15:00
mageia
mageia
Updated tcpdump package fixes a security vulnerability
2020-11-21 15:21:00
Updated libpcap and tcpdump packages fix security vulnerabilities
2019-10-17 01:22:41
redhat
redhat
(RHSA-2021:4236) Low: tcpdump security and bug fix update
2021-11-09 08:48:42
(RHSA-2021:4845) Moderate: Red Hat OpenShift Container Storage 4.8.5 Security and Bug Fix Update
2021-11-29 13:20:02
debian
debian
[SECURITY] [DLA 2444-1] tcpdump security update
2020-11-10 15:11:58
photon
photon
Important Photon OS Security Update - PHSA-2020-0165
2020-11-24 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0339
2020-11-18 00:00:00
Important Photon OS Security Update - PHSA-2020-0339
2020-11-18 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: tcpdump-4.9.3-4.fc32
2020-12-06 02:54:11
[SECURITY] Fedora 33 Update: tcpdump-4.9.3-5.fc33
2020-11-30 01:09:44
[SECURITY] Fedora 31 Update: libpcap-1.9.1-1.fc31
2019-10-27 01:29:56
oraclelinux
oraclelinux
tcpdump security and bug fix update
2021-11-16 00:00:00
almalinux
almalinux
Low: tcpdump security and bug fix update
2021-11-09 08:48:42
rocky
rocky
tcpdump security and bug fix update
2021-11-09 08:48:42
slackware
slackware
[slackware-security] tcpdump
2019-10-02 06:51:41
apple
apple
About the security content of Security Update 2021-003 Mojave
2021-04-26 00:00:00
About the security content of Security Update 2021-002 Catalina
2021-04-26 00:00:00
About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
2019-12-10 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.9%

JSON
Related for USN-5331-2
openvas44nessus54osv7cloudfoundry2ubuntu1suse7cbl_mariner4debiancve2f51veracode2cve2prion2ubuntucve2redhatcve2alpinelinux2mageia2redhat2debian1photon14fedora8oraclelinux1almalinux1rocky1slackware1apple5