CVE-2018-19519
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print...
5.5 MediumFix available
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
2.59%Up 0.5 points since Apr 14, 2021
What each source reports
NVD Score used
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
- Record
CVE-2018-19519- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-125, CWE-909
- Updated
- 2026-11-02
CVE List No score
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
- Record
CVE-2018-19519- Updated
- 2026-11-02
EUVDEUVD-2018-11208 No score
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
- Record
EUVD-2018-11208- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7252-xx9j-xr4g
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print...
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
- Record
GHSA-7252-xx9j-xr4g- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVBELL-CVE-2018-19519
CVE-2018-19519 does not affect BellSoft software
- Record
BELL-CVE-2018-19519- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSV
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
- Record
CVE-2018-19519- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 10 moreShow less
OSVDEBIAN-CVE-2018-19519
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
- Record
DEBIAN-CVE-2018-19519- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2019:3976
Red Hat Security Advisory: tcpdump security update
- Record
RHSA-2019:3976- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2020:1604
Red Hat Security Advisory: tcpdump security update
- Record
RHSA-2020:1604- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-19519
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
- Record
UBUNTU-CVE-2018-19519- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2018-0492 No score
Updated tcpdump package fixes security vulnerability
Fixed a stack-based buffer over-read in the print_prefix function (CVE-2018-19519).
- Record
MGASA-2018-0492- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11425-1 No score
tcpdump-4.99.1-1.2 on GA media
These are all security issues fixed in the tcpdump-4.99.1-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11425-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:4131-1 No score
Security update for tcpdump
This update for tcpdump fixes the following issues:
Security issues fixed:
- CVE-2018-19519: Fixed a stack-based buffer over-read in the print_prefix function (bsc#1117267)
- Record
SUSE-SU-2018:4131-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:4149-1 No score
Security update for tcpdump
This update for tcpdump fixes the following issues:
Security issues fixed:
- CVE-2018-19519: Fixed a stack-based buffer over-read in the print_prefix function (bsc#1117267)
- Record
SUSE-SU-2018:4149-1- Updated
- 2026-11-02
OSVUSN-4252-1 No score
tcpdump vulnerabilities
Multiple security issues were discovered in tcpdump. A remote attacker could use these issues to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-4252-1- Updated
- 2026-11-02
OSVUSN-4252-2 No score
tcpdump vulnerabilities
USN-4252-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
Multiple security issues were discovered in tcpdump. A remote attacker could use these issues to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-4252-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tcpdumpDebian:12 |
All versions, plus listed versions 4.99.3-14.99.4-14.99.4-24.99.4-34.99.4-4 Show 6 moreShow less4.99.4-54.99.5-14.99.5-24.99.5-34.99.6-14.99.6-2 |
None known |
tcpdumpDebian:13 |
All versions, plus listed versions 4.99.5-24.99.5-34.99.6-14.99.6-2 |
None known |
tcpdumpDebian:14 |
All versions, plus listed versions 4.99.5-24.99.5-34.99.6-14.99.6-2 |
None known |
tcpdumpMageia:6 |
before 4.9.2-1.1.mga6 | 4.9.2-1.1.mga6 |
tcpdumpRed Hat:enterprise_linux:7::client |
before 14:4.9.2-4.el7_7.1 | 14:4.9.2-4.el7_7.1 |
tcpdump-debuginfoRed Hat:enterprise_linux:7::client |
before 14:4.9.2-4.el7_7.1 | 14:4.9.2-4.el7_7.1 |
tcpdumpRed Hat:enterprise_linux:7::computenode |
before 14:4.9.2-4.el7_7.1 | 14:4.9.2-4.el7_7.1 |
tcpdump-debuginfoRed Hat:enterprise_linux:7::computenode |
before 14:4.9.2-4.el7_7.1 | 14:4.9.2-4.el7_7.1 |
tcpdumpRed Hat:enterprise_linux:7::server |
before 14:4.9.2-4.el7_7.1 | 14:4.9.2-4.el7_7.1 |
tcpdump-debuginfoRed Hat:enterprise_linux:7::server |
before 14:4.9.2-4.el7_7.1 | 14:4.9.2-4.el7_7.1 |
Show 16 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tcpdumpRed Hat:enterprise_linux:7::workstation |
before 14:4.9.2-4.el7_7.1 | 14:4.9.2-4.el7_7.1 |
tcpdump-debuginfoRed Hat:enterprise_linux:7::workstation |
before 14:4.9.2-4.el7_7.1 | 14:4.9.2-4.el7_7.1 |
tcpdumpRed Hat:enterprise_linux:8::appstream |
before 14:4.9.2-6.el8 | 14:4.9.2-6.el8 |
tcpdump-debuginfoRed Hat:enterprise_linux:8::appstream |
before 14:4.9.2-6.el8 | 14:4.9.2-6.el8 |
tcpdump-debugsourceRed Hat:enterprise_linux:8::appstream |
before 14:4.9.2-6.el8 | 14:4.9.2-6.el8 |
tcpdumpSUSE:Linux Enterprise Module for Basesystem 15 |
before 4.9.2-3.3.1 | 4.9.2-3.3.1 |
tcpdumpSUSE:Linux Enterprise Desktop 12 SP3 |
before 4.9.2-14.8.1 | 4.9.2-14.8.1 |
tcpdumpSUSE:Linux Enterprise Desktop 12 SP4 |
before 4.9.2-14.8.1 | 4.9.2-14.8.1 |
tcpdumpSUSE:Linux Enterprise Server 12 SP3 |
before 4.9.2-14.8.1 | 4.9.2-14.8.1 |
tcpdumpSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 4.9.2-14.8.1 | 4.9.2-14.8.1 |
tcpdumpSUSE:Linux Enterprise Server 12 SP4 |
before 4.9.2-14.8.1 | 4.9.2-14.8.1 |
tcpdumpSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 4.9.2-14.8.1 | 4.9.2-14.8.1 |
tcpdumpUbuntu:Pro:14.04:LTS |
before 4.9.3-0ubuntu0.14.04.1+esm1, plus listed versions 4.4.0-1ubuntu14.5.1-2ubuntu14.5.1-2ubuntu1.14.5.1-2ubuntu1.24.9.0-1ubuntu1~ubuntu14.04.14.9.2-0ubuntu0.14.04.1 |
4.9.3-0ubuntu0.14.04.1+esm1 |
tcpdumpUbuntu:16.04:LTS |
before 4.9.3-0ubuntu0.16.04.1, plus listed versions 4.7.4-1ubuntu14.9.0-1ubuntu1~ubuntu16.04.14.9.2-0ubuntu0.16.04.1 |
4.9.3-0ubuntu0.16.04.1 |
tcpdumpUbuntu:18.04:LTS |
before 4.9.3-0ubuntu0.18.04.1, plus listed versions 4.9.2-14.9.2-24.9.2-2build14.9.2-2ubuntu14.9.2-3 |
4.9.3-0ubuntu0.18.04.1 |
tcpdumpopenSUSE:Tumbleweed |
before 4.99.1-1.2 | 4.99.1-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-19519 is a medium vulnerability (CVSS 5.5) in Tcpdump, published November 25, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.59%, the 85th percentile. Fixed in tcpdump 4.9.2-1.1.mga6.
References
securityfocus.com/bid/106098
github.com/zyingp/temp/blob/master/tcpdump.md
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU
access.redhat.com/errata/RHSA-2019:3976
Show 194 moreShow less
usn.ubuntu.com/4252-2
kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
nvd.nist.gov/vuln/detail/CVE-2018-19519
docs.bell-sw.com/security/cves/CVE-2018-19519
security-tracker.debian.org/tracker/CVE-2018-19519
advisories.mageia.org/MGASA-2018-0492.html
bugs.mageia.org/show_bug.cgi?id=24077
lists.opensuse.org/opensuse-updates/2018-12/msg00081.html
bugzilla.redhat.com/show_bug.cgi?id=1655374
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3976.json
cve.org/CVERecord?id=CVE-2018-19519
suse.com/support/update/announcement/2018/suse-su-20184131-1
bugzilla.suse.com/1117267
ubuntu.com/security/CVE-2018-19519
This page doesn't list everything
Left out here: 22 references. The JSON record has them.