CVE-2020-8037

Description

References

• seclists.org/fulldisclosure/2021/Apr/51 · Mailing List
• the-tcpdump-group/tcpdump commit 32027e1 · Patch
• lists.debian.org/debian-lts-announce/2020/11/msg00018.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2MX34MJIUJQGL6CMEPLTKFOOOC3CJ4Z
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWDBONZVLC6BAOR2KM376DJCM4H3FERV
• support.apple.com/kb/HT212325 · Third Party Advisory
• support.apple.com/kb/HT212326 · Third Party Advisory
• support.apple.com/kb/HT212327 · Third Party Advisory

Altre vulnerabilità di tcpdump

• CVE-2023-1801MEDIO 6.5The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.
• CVE-2019-15167CRITICO 9.1The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability th…
• CVE-2020-8036ALTO 7.5The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
• CVE-2019-15166ALTO 7.5lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
• CVE-2018-16452ALTO 7.5The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.