CVE-2018-14462

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3

Description The issue is related to a buffer over-read in the ICMP parser, specifically in the icmp print() function in print-icmp.c. This can be exploited by a remote attacker to cause a denial of service or potentially gain unauthorized access to information, compromising its integrity and availability.

Recommendations For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the icmp print() function in print-icmp.c until a patch is available.