PT-2017-3918

CVE-2018-14467

·

Published

2017-10-08

·

Updated

2026-10-31

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3
Description The issue is related to a buffer over-read in the BGP parser of the tcpdump utility, specifically in the bgp capabilities print() function. This can be exploited by a remote attacker to cause a denial of service or potentially gain unauthorized access to information, affecting its integrity and availability.
Recommendations For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the bgp capabilities print() function until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2019-3120
ALT-PU-2020-3563
ALT-PU-2021-1433
CESA-2020_4760
CLEANSTART-2023-TX43877
DLA-1955-1
DSA-4547-1
MGASA-2019-0297
OPENSUSE-SU-2019:2344-1
OPENSUSE-SU-2019_2344-1
OPENSUSE-SU-2019:2348-1
OPENSUSE-SU-2019_2348-1
OPENSUSE-SU-2024:11425-1
RHSA-2020:4760
RHSA-2020_4760
RLSA-2020:4760
SUSE-SU-2019:14191-1
SUSE-SU-2019_14191-1
SUSE-SU-2019:2674-1
SUSE-SU-2020:3360-1
USN-4252-1
USN-4252-2
Found an issue in the description? Have something to add? Feel free to write us 👾