PT-2017-3918

CVE-2018-14467

·

Publicado

2017-10-08

·

Atualizado

2026-10-31

Descrição por

CVSS 3.1
7.5
Alta
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3
Description The issue is related to a buffer over-read in the BGP parser of the tcpdump utility, specifically in the bgp capabilities print() function. This can be exploited by a remote attacker to cause a denial of service or potentially gain unauthorized access to information, affecting its integrity and availability.
Recommendations For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the bgp capabilities print() function until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ALT-PU-2019-3120
ALT-PU-2020-3563
ALT-PU-2021-1433
CESA-2020_4760
CLEANSTART-2023-TX43877
DLA-1955-1
DSA-4547-1
MGASA-2019-0297
OPENSUSE-SU-2019:2344-1
OPENSUSE-SU-2019_2344-1
OPENSUSE-SU-2019:2348-1
OPENSUSE-SU-2019_2348-1
OPENSUSE-SU-2024:11425-1
RHSA-2020:4760
RHSA-2020_4760
RLSA-2020:4760
SUSE-SU-2019:14191-1
SUSE-SU-2019_14191-1
SUSE-SU-2019:2674-1
SUSE-SU-2020:3360-1
USN-4252-1
USN-4252-2
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾