CVE-2019-15166

Description

References

• lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html · Mailing List
• seclists.org/fulldisclosure/2019/Dec/26 · Mailing List
• the-tcpdump-group/tcpdump · Release Notes
• the-tcpdump-group/tcpdump commit 0b661e0 · Patch
• lists.debian.org/debian-lts-announce/2019/10/msg00015.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU
• seclists.org/bugtraq/2019/Dec/23 · Mailing List
• seclists.org/bugtraq/2019/Oct/28 · Mailing List
• security.netapp.com/advisory/ntap-20200120-0001 · Third Party Advisory
• support.apple.com/kb/HT210788 · Third Party Advisory
• usn.ubuntu.com/4252-1 · Third Party Advisory
• usn.ubuntu.com/4252-2 · Third Party Advisory
• debian.org/security/2019/dsa-4547 · Third Party Advisory

tcpdump 的其他漏洞

• CVE-2023-1801中危 6.5The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.
• CVE-2019-15167严重 9.1The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability th…
• CVE-2020-8037高危 7.5The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
• CVE-2020-8036高危 7.5The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
• CVE-2018-16452高危 7.5The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.