{"id":"CVE-2017-16808","aliases":["ALPINE-CVE-2017-16808","BELL-CVE-2017-16808","DEBIAN-CVE-2017-16808","EUVD-2017-7983","GHSA-j4v3-95xv-q35p","MGASA-2019-0297","SUSE-SU-2019:2087-1","SUSE-SU-2019:2088-1","SUSE-SU-2019:2674-1","SUSE-SU-2020:3360-1","UBUNTU-CVE-2017-16808","USN-4252-1","USN-4252-2","openSUSE-SU-2019:1964-1","openSUSE-SU-2019:2344-1","openSUSE-SU-2019:2348-1","openSUSE-SU-2024:11425-1"],"status":"published","title":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and...","description":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03167,"percentile":0.88101,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2017-11-13T21:00:00Z","modified":"2026-10-24T10:50:28Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tcpdump","fixed_in":["4.9.3~git20190901-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tcpdump","fixed_in":["4.9.3~git20190901-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tcpdump","fixed_in":["4.9.3~git20190901-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.14.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3~git20190901-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3~git20190901-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3~git20190901-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1.mga7"}]}],"bundled":32},{"source":"osv","ecosystem":"Mageia:7","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.mga7"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.17.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.17.1"}]}],"bundled":29},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.14.04.1+esm1"}]}],"versions":["4.4.0-1ubuntu1","4.5.1-2ubuntu1","4.5.1-2ubuntu1.1","4.5.1-2ubuntu1.2","4.9.0-1ubuntu1~ubuntu14.04.1","4.9.2-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.16.04.1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1","4.9.2-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.18.04.1"}]}],"versions":["4.9.2-1","4.9.2-2","4.9.2-2build1","4.9.2-2ubuntu1","4.9.2-3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.16.04.1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1","4.9.2-0ubuntu0.16.04.1"],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.18.04.1"}]}],"versions":["4.9.2-1","4.9.2-2","4.9.2-2build1","4.9.2-2ubuntu1","4.9.2-3"],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.14.04.1+esm1"}]}],"versions":["4.4.0-1ubuntu1","4.5.1-2ubuntu1","4.5.1-2ubuntu1.1","4.5.1-2ubuntu1.2","4.9.0-1ubuntu1~ubuntu14.04.1","4.9.2-0ubuntu0.14.04.1"],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp151.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp151.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp150.10.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp151.4.6.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.1-1.2"}]}],"bundled":161}],"products":[{"vendor":"tcpdump","product":"tcpdump"}],"references":[{"url":"http://www.securitytracker.com/id/1039773","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory","report"]},{"url":"https://github.com/the-tcpdump-group/tcpdump/issues/645","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00065.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://seclists.org/bugtraq/2019/Oct/2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://packetstormsecurity.com/files/154710/Slackware-Security-Advisory-tcpdump-Updates.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://support.apple.com/kb/HT210788","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://seclists.org/bugtraq/2019/Dec/23","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2019/Dec/26","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4252-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4252-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16808"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU"},{"url":"https://usn.ubuntu.com/4252-1"},{"url":"https://usn.ubuntu.com/4252-2"},{"url":"https://github.com/advisories/GHSA-j4v3-95xv-q35p"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-16808","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-16808","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-16808","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0297.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25565","tags":["report"]},{"url":"https://www.tcpdump.org/libpcap-changes.txt","tags":["web"]},{"url":"https://www.tcpdump.org/tcpdump-changes.txt","tags":["web"]},{"url":"https://www.tcpdump.org/public-cve-list.txt","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192087-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1068716","tags":["report"]},{"url":"https://bugzilla.suse.com/1142439","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1010220","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192088-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192674-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153098","tags":["report"]},{"url":"https://bugzilla.suse.com/1153332","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15167","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203360-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178466","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8037","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-16808","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4252-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4252-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-1010220","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4VLIEZJL2QEPKCED2PAQPK5ATCJVUIOA/#4VLIEZJL2QEPKCED2PAQPK5ATCJVUIOA","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MKQWXXAEJMKN6KVJXWDQTBKWQTVSGWAA/#MKQWXXAEJMKN6KVJXWDQTBKWQTVSGWAA","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZPOIE2ZQZQ57X2YSWXD43L2MIX37I54G/#ZPOIE2ZQZQ57X2YSWXD43L2MIX37I54G","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19519","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-16808","description":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.","status":"published","published":"2017-11-13T21:00:00Z","modified":"2024-08-05T20:35:21.042Z","updated_at":"2026-11-02T14:33:21.453505Z"}],"euvd":[{"id":"EUVD-2017-7983","description":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.","status":"published","published":"2017-11-13T21:00:00Z","modified":"2024-08-05T20:35:21Z","updated_at":"2026-11-03T02:23:11.533108Z"}],"ghsa":[{"id":"GHSA-j4v3-95xv-q35p","title":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and...","description":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.","status":"published","published":"2022-05-13T01:53:59Z","modified":"2025-04-20T03:49:26Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:01:55.641204Z"}],"nvd":[{"id":"CVE-2017-16808","description":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.","status":"published","published":"2017-11-13T21:29:00.363Z","modified":"2026-06-17T01:09:57.54Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:08.635428Z"}],"osv":[{"id":"ALPINE-CVE-2017-16808","description":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.","status":"published","published":"2017-11-13T21:29:00.363Z","modified":"2026-06-15T18:18:06.776647381Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-16808","title":"CVE-2017-16808 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:37.624198Z","modified":"2026-01-26T09:46:21.668249Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-16808","description":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.","status":"published","published":"2017-11-13T21:29:00.363Z","modified":"2026-10-24T10:50:28.678793647Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"DEBIAN-CVE-2017-16808","description":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.","status":"published","published":"2017-11-13T21:29:00.363Z","modified":"2026-09-01T20:03:45.154785961Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"UBUNTU-CVE-2017-16808","description":"tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.","status":"published","published":"2017-11-13T21:29:00Z","modified":"2026-02-04T03:47:05.649478Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"MGASA-2019-0297","title":"Updated libpcap and tcpdump packages fix security vulnerabilities","description":"Updated libpcap and tcpdump packages fix security vulnerabilities:\n\nThe libpcap packages have been updated to versions 1.9.1 and tcpdump\nto 4.9.3, respectively, fixing several buffer overread and overflow\nissues.\n","status":"published","published":"2019-10-16T22:22:41Z","modified":"2026-04-16T04:44:25.592800208Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:1964-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-1010220: Fixed a buffer over-read in print_prefix() which may expose data (bsc#1142439).\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print() and lookup_emem() (bsc#1068716).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-08-20T10:56:53Z","modified":"2026-02-04T03:41:23.950317Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2344-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).\n- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).\n- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).\n- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-20T16:18:13Z","modified":"2026-02-04T02:49:18.186867Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2348-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).\n- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).\n- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).\n- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-20T18:19:33Z","modified":"2026-02-04T02:55:24.542665Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11425-1","title":"tcpdump-4.99.1-1.2 on GA media","description":"These are all security issues fixed in the tcpdump-4.99.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:56:33.613635Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:2087-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-1010220: Fixed a buffer over-read in print_prefix() which may expose data (bsc#1142439).\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print() and lookup_emem() (bsc#1068716).\n","status":"published","published":"2019-08-07T16:16:51Z","modified":"2026-02-04T03:15:34.40921Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2088-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-1010220: Fixed a buffer over-read in print_prefix() which may expose data (bsc#1142439).\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print() and lookup_emem() (bsc#1068716).\n","status":"published","published":"2019-08-07T16:17:32Z","modified":"2026-02-04T02:52:14.276298Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2674-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).\n- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).\n- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).\n- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).\n","status":"published","published":"2019-10-15T14:53:30Z","modified":"2026-02-04T02:49:51.513216Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:3360-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).\n\nThe previous update of tcpdump already fixed variuous Buffer overflow/overread vulnerabilities [bsc#1153098, bsc#1153332]\n\n- CVE-2017-16808 (AoE)\n- CVE-2018-14468 (FrameRelay)\n- CVE-2018-14469 (IKEv1)\n- CVE-2018-14470 (BABEL)\n- CVE-2018-14466 (AFS/RX)\n- CVE-2018-14461 (LDP)\n- CVE-2018-14462 (ICMP)\n- CVE-2018-14465 (RSVP)\n- CVE-2018-14464 (LMP)\n- CVE-2019-15166 (LMP)\n- CVE-2018-14880 (OSPF6)\n- CVE-2018-14882 (RPL)\n- CVE-2018-16227 (802.11)\n- CVE-2018-16229 (DCCP)\n- CVE-2018-14467 (BGP)\n- CVE-2018-14881 (BGP)\n- CVE-2018-16230 (BGP)\n- CVE-2018-16300 (BGP)\n- CVE-2018-14463 (VRRP)\n- CVE-2019-15167 (VRRP)\n- CVE-2018-14879 (tcpdump -V)\n- CVE-2018-16228 (HNCP) is a duplicate of the already fixed CVE-2019-1010220\n- CVE-2018-16301 (fixed in libpcap)\n- CVE-2018-16451 (SMB)\n- CVE-2018-16452 (SMB)\n- CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)\n- CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)\n","status":"published","published":"2020-11-17T12:41:00Z","modified":"2026-02-04T03:53:34.005689Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4252-1","title":"tcpdump vulnerabilities","description":"Multiple security issues were discovered in tcpdump. A remote attacker\ncould use these issues to cause tcpdump to crash, resulting in a denial of\nservice, or possibly execute arbitrary code.\n","status":"published","published":"2020-01-27T15:12:07Z","modified":"2026-02-10T04:41:45Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4252-2","title":"tcpdump vulnerabilities","description":"USN-4252-1 fixed several vulnerabilities in tcpdump. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Multiple security issues were discovered in tcpdump. A remote attacker\n could use these issues to cause tcpdump to crash, resulting in a denial of\n service, or possibly execute arbitrary code.\n","status":"published","published":"2020-01-27T18:09:45Z","modified":"2026-02-10T04:41:45Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}